Stolen OAuth tokens used to download data from dozens of orgs, GitHub warnsNuclei flaw allows signature bypass and code execution | SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 27 | Security Affairs newsletter Round 505 by Pierluigi Paganini – INTERNATIONAL EDITION | Malicious npm packages target Ethereum developers | US Treasury Department sanctioned Chinese cybersecurity firm linked to Flax Typhoon APT | FireScam Android info-stealing malware supports spyware capabiliti
