Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

One pull to wipe them all

Q Developer is a free extension that lets a coding agent read a project, propose changes, and run commands on The post One pull to wipe them all appeared first on The New Stack .

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

TL;DR what: Google Threat Intelligence Group detailed three suspected Russian espionage clusters, UNC6293, UNC7005, and UNC5976, that phish authentication flows rather than passwords, using OAuth consent, application specific passwords, device code grants, and WhatsApp device linking.

  • Three Russian espionage clusters targeting authentication flows, not just passwords
  • UNC6293, UNC7005, and UNC5976 clusters active since March 2026
  • Clusters manipulate OAuth consent, application-specific passwords, and WhatsApp device linking

More from Sunday 23 August →