The Hacker News

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...
HackerNoon

EvilTokens: How “Ghost” Code Threatens US and European Businesses

Learn how EvilTokens hides Microsoft 365 phishing behind browser-side decryption and how browser-level analysis helps SOC ...
GitHub

A tiny JavaScript debugging utility modelled after Node.js core's debugging technique. Works in Node.js and web browsers.

debug exposes a function; simply pass this function the name of your module, and it will return a decorated version of console.error for you to pass debug statements ...

North Korea's Lazarus Group snares developers worldwide with fake code packages after stealing W1tr this year

JFrog's security research lab, based in Silicon Valley, said Friday (local time) it had discovered six malicious packages in ...
GitHub

JSO – OAuth 2.0 Client with Javascript

JSO is a simple and flexible OAuth javascript library to use in your web application or native mobile app. JSO is provided by UNINETT AS, a non-profit company working for educational and research ...