A new open-source tool called Betterleaks can scan directories, files, and git repositories and identify valid secrets using default or customized rules.
Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
This is the working area for the IETF JOSE Working Group Internet-Draft, "Use of Hybrid Public Key Encryption (HPKE) with JSON Web Encryption (JWE)".