/
attack_type:credential_theft × latest_source_host:welivesecurity.com × limpar

Resultados

3 casos · pág. 1/1

welivesecurity.com · low

Vibe-coded apps expose users to hardcoded secrets, weak access controls and prompt injection; Lovable-hosted app had 16 flaws

AI-assisted "vibe coding" is lowering the barrier to app development, but it is also producing apps with common security oversights that app marketplaces do not necessarily flag. The article cites a report that 84% of developers were using or planning to use AI tools, and a Lovable-hosted app in which a researcher found 16 vulnerabilities…

welivesecurity.com · medium

Brand deal scam impersonating Hollyland, Nike and Spotify hijacks YouTube creators' Google accounts

A modular phishing campaign targets YouTube creators with personalized sponsorship offers from fake brand representatives. One variant impersonates Hollyland, a maker of wireless video transmission equipment, and also Nike and Spotify. Victims are led through a convincing fake collaboration platform to a bogus "Sign in with Google" page t…