Google DevSite's OAuth secret was also its Flask signing key - forged cookies led to pickle RCE. https://intel.threadlinqs.com/threat/TL-2026-3355 #ThreatIntel #Python #pickletoolsdis #curl
@threadlinqs.bsky.social
Explore
@threadlinqs.bsky.social
@threadlinqs.bsky.socialGoogle DevSite's OAuth secret was also its Flask signing key - forged cookies led to pickle RCE. https://intel.threadlinqs.com/threat/TL-2026-3355 #ThreatIntel #Python #pickletoolsdis #curl