Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Protected nothing

Field notes from a proof-of-concept food-diary tool built alongside one NHS dietetic team, not an official NHS product, no patient data anywhere in it.

Three Russian Clusters Are Phishing Auth Flows, Not Passwords: OAuth, App Passwords, and WhatsApp Device Linking

TL;DR what: Google Threat Intelligence Group detailed three suspected Russian espionage clusters, UNC6293, UNC7005, and UNC5976, that phish authentication flows rather than passwords, using OAuth…

  • Three Russian espionage clusters targeting authentication flows, not just passwords
  • UNC6293, UNC7005, and UNC5976 clusters active since March 2026
  • Clusters manipulate OAuth consent, application-specific passwords, and WhatsApp device linking

More from Sunday 23 August →