Microsoft 365 Android Apps Had a Token Flaw IT Teams Should Check Now

Microsoft patched a Microsoft 365 Android flaw that exposed account tokens across six apps. Here’s what IT teams should check ...
Android Authority

Google is reportedly buying Play Store app code from devs, and you can guess why

Google is reportedly paying select Play Store developers for access to their app source code as part of a confidential program aimed at improving its AI coding tools. Developers invited to participate ...

Lil Finder Guy pet was the gateway to building my own Mac apps with Codex

At the start of May, OpenAI released a playful feature inside its Codex desktop app for creating a virtual pet. This silly ...

Meta Silently Added Face-Recognition Code for Its Smart Glasses to Millions of Phones

Code reviewed by WIRED uncovered an unreleased face-recognition system embedded in Meta’s smart glasses platform. It’s ...
The Hacker News

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...
The Next Web

A popular OpenAI Codex tool with 29,000 weekly downloads has been quietly stealing developer tokens for a month

The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.