Credential Theft

1 article

Browse all articles about Credential Theft. Explore expert insights and research from the Shinobi team.

CVE-2026-70478

Bug of the Week: You shared your chat, so I read your email!

A helpdesk bot on your intranet, wired to the shared mailbox and calendar. Two unauthenticated HTTP requests, and anyone who can open the page is holding a live OAuth token for the accounts behind it.

David Mound

2026-08-25

6 min read