ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

A supply chain attack on n8n injected malicious community nodes to steal user OAuth tokens, highlighting critical risks in open-source automation and third-party integrations The Silicon Review.

Organizations can now use Descope as a dedicated auth and access control layer for AI agents and MCP servers with ephemeral ...

Obsidian pointed to last summer’s breach of Salesloft Inc.’s cloud sales platform as one of the largest and most recent ...

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...

The standard grew too far away from its roots as a simple Web authentication technology, author Eran Hammer-Lahav says, and now is insecure and overly broad. Stephen Shankland worked at CNET from 1998 ...

Application-based attacks that use the passwordless “log in with…” feature common to cloud services are on the rise. Against the backdrop of widespread remote working and the increased use of ...

Learn how to design secure OAuth scopes and consent flows for enterprise applications. A complete guide for CTOs on API ...

What SOC teams need to monitor, triage, and contain when clawdbot-like agentic AI assistants. Includes detection signals, triage questions, and a containment playbook. The post Clawdbot-Style Agentic ...