Pranav Kalidas

On July 2nd, 2025, a user known as 'Admirable-Raccoon597' on reddit claims to have downloaded a mouse configuration tool from their official website. Upon noticing suspicious activity, they investigated further and discovered that the software contained a hidden trojan identified as 'Synaptics.exe'. This incident was not isolated; another user reported finding similar malware embedded within the software for another gaming mouse utility tool. Talk about a mouse becoming a RAT …. Downloading...

The recent supply chain breach at Vercel highlights a critical blind spot: once an attacker hijacks a valid OAuth token, they don’t need to crack your password, they simply inherit your trust and walk right past your MFA No password is needed No MFA challenge is triggered No anomalous login event is created while the user is accepted Once a session token is issued, access is governed by the token alone, completely detached from the factors that created it. This is what an OAuth abuse looks...