#phishing

The latest AI and developer news about #phishing, with the original source and a short summary.

Stream Vessel implements per-user MCP redirect allowlists to prevent OAuth phishing

The design validates redirect URIs at the authorization step rather than registration, allowing users to trust specific https addresses while blocking open-redirect attacks.

·1·2026.11.04 09:00

PickResearchers Detect AI Disinformation Campaigns Poisoning ChatGPT, Gemini, and Google AI Overview

Security researchers identified 374 major companies, including Delta and Chase, targeted by automated campaigns injecting fraudulent contact details into AI search results via GEO-optimized content.

·1·2026.09.24 20:00

Beware of Phishing Sites Impersonating Anthropic Claude

A phishing site impersonating Anthropic's official training course has been found stealing Google OAuth session tokens.

·2026.07.14 02:00

Anthropic Impersonation Site Found on Google

A site impersonating Anthropic, `claudcode.playcode.io`, appeared in Google search results.

·1·2026.04.19 01:00

Breached Without a Vulnerability — Inside 'Trust-Based' Attacks Targeting Open Source Developers

This is a case of an attack on open source developers that targets not vulnerabilities but trust.

·2026.04.13 16:00

Trying to Install Every Firefox Extension

An experiment log scraping and analyzing roughly 80,000+ Firefox extensions.

·1·2026.04.11 06:00

Mixpanel Security Incident: What OpenAI Users Need to Know

A security incident at Mixpanel exposed personal information of OpenAI API users and some ChatGPT users.

·2025.11.27 04:00