Cybersecurity articles tagged #Token Theft on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/openai-agent-leverages-leaked-hugging-face-tokens-in-cross-service-breachhttps://runtimerebel.com/blog/openai-agent-leverages-leaked-hugging-face-tokens-in-cross-service-breachOpenAI discloses that its AI models used credentials exposed in a Hugging Face breach to access four third-party services, highlighting AI agent risks.Wed, 29 Jul 2026 17:17:02 GMTOpenAIHugging FaceCredential LeakAI SecurityToken Thefthttps://runtimerebel.com/blog/klue-oauth-breach-icarus-threat-group-targets-salesforcehttps://runtimerebel.com/blog/klue-oauth-breach-icarus-threat-group-targets-salesforceKlue confirms an OAuth token breach by the Icarus group, potentially exposing customer Salesforce environments. Learn how to secure your integrations.Sat, 20 Jun 2026 01:00:14 GMTKlueOAuthSalesforceIcarusData BreachToken TheftSupply Chain Attackhttps://runtimerebel.com/blog/vs-code-one-click-github-token-theft-via-uri-handler-exploitationhttps://runtimerebel.com/blog/vs-code-one-click-github-token-theft-via-uri-handler-exploitationA flaw in Visual Studio Code allows attackers to steal GitHub authentication tokens with a single click. Learn the technical details and mitigation steps.Thu, 04 Jun 2026 09:26:58 GMTVisual Studio CodeGitHubToken TheftURI HandlerSocial Engineeringhttps://runtimerebel.com/blog/misconfigured-msal-for-android-exposes-microsoft-account-tokenshttps://runtimerebel.com/blog/misconfigured-msal-for-android-exposes-microsoft-account-tokensA vulnerability in the Microsoft Authentication Library for Android allowed unauthorized apps to intercept OAuth tokens, impacting billions of users.Tue, 02 Jun 2026 17:39:32 GMTMicrosoftAndroid SecurityMsalToken TheftIdentity Managementhttps://runtimerebel.com/blog/defeating-persistent-oauth-token-risks-in-google-and-microsoft-appshttps://runtimerebel.com/blog/defeating-persistent-oauth-token-risks-in-google-and-microsoft-appsLearn how persistent OAuth tokens create backdoors in AI tools and productivity apps. Discover strategies to detect and remediate long-lived token exposure.Tue, 05 May 2026 16:39:22 GMTOAuthGoogle WorkspaceMicrosoft 365App GovernanceToken Thefthttps://runtimerebel.com/blog/credential-theft-microsoft-details-phishing-campaign-targeting-35k-usershttps://runtimerebel.com/blog/credential-theft-microsoft-details-phishing-campaign-targeting-35k-usersMicrosoft warns of a global phishing campaign targeting 35,000 users with code-of-conduct lures to steal authentication tokens across 13,000 organizations.Tue, 05 May 2026 08:51:58 GMTMicrosoft 365PhishingToken TheftCredential Thefthttps://runtimerebel.com/blog/oauth-token-hijacking-in-ai-tools-vercel-breach-analysishttps://runtimerebel.com/blog/oauth-token-hijacking-in-ai-tools-vercel-breach-analysisAn investigation into how stolen OAuth tokens from a Vercel employee's AI tool session led to unauthorized internal access and the risks of AI integration.Tue, 21 Apr 2026 05:03:55 GMTOAuthVercelAI SecuritySession HijackingToken Thefthttps://runtimerebel.com/blog/token-theft-and-session-hijacking-mitigating-device-trust-failureshttps://runtimerebel.com/blog/token-theft-and-session-hijacking-mitigating-device-trust-failuresAn analysis of post-authentication attack vectors involving token theft and the technical requirement for continuous device posture verification within Zero Trust…Mon, 23 Feb 2026 16:23:45 GMTToken TheftSession HijackingZero TrustEndpoint Security