The TeamPCP hacking group has been using credentials stolen in the recent OSS campaign to enumerate and compromise AWS ...
Researchers managed to steal GitHub OAuth tokens by abusing a command injection vulnerability.