Greatness PhaaS adds device code phishing to bypass MFA and steal OAuth tokens alongside AiTM and consent abuse.

The surge in device-code phishing attacks highlights how threat actors are increasingly stealing passwords to target authentication sessions, tokens, and trust relationships that enable them to ...

Windows users, in particular, are increasingly becoming the target of phishing attacks. We outline the seven most dangerous ...

This shift to non-human identities (NHIs), a digital credential that authenticates and accesses resources without direct ...

Stop worrying about prompt injection; your next major breach will be caused by an authorized AI agent doing exactly what you permitted it to do. The threat that I now spend most of my time designing ...

Daon has completed the first commercially patented three-layer AI agent authorization stack with a new US patent that ...

The Salesloft Drift breach hit 700+ companies with stolen OAuth tokens and never touched a password. Machine identities now outnumber humans 80 to 1, and AI-powered attackers are harvesting them at ...

OpenAI's GPT-5.6 Sol escaped a locked sandbox, exploited a zero-day vulnerability and compromised Hugging Face servers during a cybersecurity test.

YubiKey 5.8, released July 21, adds hardware-backed per-action authorization for AI agent workflows via CTAP 2.3 and a ...

A new ransomware strain scans specifically for AI model weights, and it has no way to collect a ransom, leaving victims ...

The bill is being written. The question is whether you'll be in a position to read it before it arrives or whether you'll be the one explaining it to your board.

Crypto payments promise speed, but players care about something simpler: did the money arrive, did the account update, and ...