Tag: authentication tokens
2 articles
Twitch Extension Exposes Users' OAuth Tokens
A popular browser extension with over 30,000 installs, marketed as Twitch Enhanced Viewer | JeetBot, has been found to be secretly forwarding users' sensitive Twitch OAuth session tokens to a third-party bot service. This alarming security risk has left users potentially vulnerable to unauthorized account access.
Non-Human Identities Emerge as Prime Hacker Entry Points
Compromised non-human identities, like AI agents and API keys, have become the top entry point for hackers, fueling 31% of corporate intrusions. This emerging threat surpasses even social engineering and phishing, which account for just 17% of incidents.