Google Threat Intelligence Group has tracked threat actor UNC6395 stealing OAuth tokens via Salesloft Drift integrations in a ...

AI agents require broad API access across multiple domains simultaneously—LLM providers, enterprise APIs, cloud services, and data stores—creating identity management complexity that traditional ...

On August 26, 2025, Nx, the popular build platform with millions of weekly downloads, was compromised with ...

Threat researchers report that "a widespread data theft campaign" traces to attackers stealing OAuth access tokens for ...

The widespread data theft campaign that struck hundreds of Salesforce customers through Salesloft Drift also impacted Google ...

In the rush of Web3 innovation, crypto builders must navigate a thicket of fragmented tools and networks. A decentralized ...

Palo Alto Networks (PAN), the largest cybersecurity company by market capitalization, will be disclosing a data breach that ...

Cybersecurity company Zscaler warns it suffered a data breach after threat actors gained access to its Salesforce instance ...

UPDATE Google says a recent spate of Salesforce-related breaches was caused by attackers stealing OAuth tokens from the third ...

The enrollment API required no authentication, allowing attackers to register devices using only leaked organization keys and valid email addresses.

Lit Protocol's Vincent Early Access is now live, giving developers immediate tools to create permissioned, non-custodial AI agents for real DeFi strategies, powered by onchain guardrails and ...

Google has warned that nearly 2.5 billion Gmail accounts may be exposed in a massive data theft campaign, urging users to reset passwords, review app permissions, and enable two-factor authentication.