Stronger monitoring, shorter-lived tokens, and tighter controls over how tokens are used after authentication are needed as ...

Infostealer logs expose replayable AI session tokens and API keys that can bypass login controls and enable unauthorized account access.

It's connected, but the inbox I want to read won't appearThis happened when I turned on Gmail integration for an AI tool to let it read my inbox. The integration itself went through. The ...

The National Institute of Standards and Technology and the Cybersecurity and Infrastructure and Security Agency have released ...

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...

Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft ...

Anthropic, the American artificial intelligence research and safety company behind the Claude family of large language models ...

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

WSO2 API Manager JWT bypass faces active exploitation attempts using forged tokens with administrator privileges.

A financially motivated threat actor has been observed abusing free Notion accounts, malicious PDFs and device code phishing to harvest authentication tokens from targeted organizations. Sublime's ...

NIST and CISA finalize cloud token security guidance to help organizations protect access tokens from forgery, theft, and misuse.

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.