Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

One pull to wipe them all

Q Developer is a free extension that lets a coding agent read a project, propose changes, and run commands on The post One pull to wipe them all appeared first on The New Stack .

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

TL;DR what: Google Threat Intelligence Group detailed three suspected Russian espionage clusters, UNC6293, UNC7005, and UNC5976, that phish authentication flows rather than passwords, using OAuth…

  • Three Russian espionage clusters targeting authentication flows, not just passwords
  • UNC6293, UNC7005, and UNC5976 clusters active since March 2026
  • Clusters manipulate OAuth consent, application-specific passwords, and WhatsApp device linking

More from Sunday 23 August →