X (Formerly Twitter): Viral Direct Message Clickjacking via link truncation leading to capture of both Google credentials & installation of malicious 3rd party Twitter App

Summary: Viral Direct Message Clickjacking via link truncation leading to capture of both Google credentials & installation of malicious 3rd party Twitter App Description: Because very long links in direct messages are truncated after 38 characters the malicious actors were able to provide a...

Slack: "a stored xss issue in share post menu"

good day: when a team mate named an xss payload: ex: " " that xss payload will execute when making a post then share it, to a team that has an xss payload named. that shared as a direct message please see screenshot when making post here: https://hunter22.slack.com/files/create/space...

Twitter warning, Do not click DM saying "My profile was viewed..times..today"

A very quick and urgent warning for Twitter users, If you receive a direct message DM on Twitter saying "My profile was viewed..times..today" with a link then please don't click it. If you do, you will run the risk of having your Twitter account hijacked, your account turned into a spam-spewing...