OAuth

Shadow AI, the unofficial use of AI tools by employees, creates significant security vulnerabilities and data exposure risks within organizations.…

The Model Context Protocol (MCP) introduces unique security risks because it injects executable text directly into AI models, unlike standard…

Cybercriminals exploit internal OAuth applications to create persistent backdoors in corporate cloud systems, bypassing security measures like password resets and…

Auditing OAuth applications in Microsoft 365 is critical due to the high risk of malicious apps, which can severely compromise…

Modern digital workplaces face security challenges from interconnected tools, where attackers exploit legitimate access tokens rather than breaching traditional perimeters.…

AI-powered browsers introduce significant security vulnerabilities by embedding AI assistants that enable novel threats like malicious workflows and prompt injections,…

The rise of autonomous AI agents in workflows creates unprecedented security challenges, demanding a unified identity security fabric for protection…

A data breach at Salesloft originated from a March intrusion into its GitHub account, allowing attackers to steal authentication tokens…

Salesforce environments saw a twenty-fold surge in malicious activity in Q1 2025, as cybercriminals increasingly exploit trusted business platforms for…

A data breach at Salesloft impacted over 700 organizations, including major cybersecurity firms, by compromising OAuth tokens to access Salesforce…

Allianz Life suffered a cybersecurity breach affecting 1.1 million individuals, compromising sensitive personal data including names, addresses, and Social Security…

Workday experienced a security breach via a third-party CRM platform, exposing business contact information but not customer data, due to…

A critical Microsoft Exchange vulnerability (CVE-2025-53786, CVSS 8.0) threatens hybrid cloud environments, enabling privilege escalation across on-premises and cloud systems…

Phishing-resistant authentication methods like passkeys and FIDO2-based systems (e.g., YubiKeys) improve security, but attackers exploit weaknesses such as downgrade attacks…

Strata Identity launched Identity Orchestration for AI Agents, a solution using Maverics identity fabric to provide governance for AI agents…

A critical security flaw in Microsoft’s Entra ID, called nOAuth, has exposed thousands of enterprise applications for two years, allowing…

It is no surprise that developers are using AI models to write their code. However, a developer from Cloudflare sparked…