A recent UNC6395 Salesloft Drift breach reveals Salesforce SaaS risks. Learn how to simplify breach detection, prevention, ...

Hackers have stolen large volumes of data from numerous corporate Salesforce instances. They abused compromised access tokens ...

ShinyHunters compromised Google, Qantas & dozens more using OAuth device flow attacks—bypassing MFA without exploiting a single software bug. My deep-dive analysis reveals how they did it and what ...

Last week, GitHub Security researchers reported that an unknown attacker is using stolen OAuth user tokens issued to Heroku and Travis-CI to download data from dozens of organization’s private ...

Compositional risk from multiple MCP Servers highlighted by report Microsoft has declared general availability for MCP (model ...

Proofpoint discovers threat actors targeting verified status in the Microsoft environment to abuse OAuth privileges and lure users into authorizing malicious apps.

Gmail’s API lockdown will kill some third-party app access, starting July 15 Google emails users: "the following apps may no longer be able to access your data." ...