Watch Desk posted an update
Fake invitations to OpenAI, Anthropic and SpaceX events are being used to trick employees into exposing Microsoft and Google account credentials, according to security researchers Push Security, as reported by TechRadar.
Why it mattersThe lures promise perks such as ChatGPT Pro or access to Grok Heavy. Push says the Microsoft route can abuse device-code sign-in, while the Google route uses a reverse-proxy page to capture credentials and session information. A glossy AI invite, it turns out, can be a rather poor reason to trust a login page. TechRadar says Push does not know exactly how the links are being distributed. Treat unexpected event invitations and free-tool offers with suspicion, especially when they ask you to sign in through a link.
Discuss: Should employers block device-code sign-ins by default, or would that disrupt too many legitimate work tools?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.