OAuth stories
Enterprise teams can now switch on controls for AI agents and APIs faster, with Salt Security bundling 100 pre-built policies into its Policy Hub.
Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.
Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.
Free workshop sandboxes should make it easier for developers to try AWS training without a personal account, credit card or cleanup.
Enterprises can now buy and register third-party AI agents through Google Cloud Marketplace for use inside Gemini Enterprise.
Enterprise AI deployments may be exposing sensitive data through overlooked connector permissions, according to a new governance framework from Vivek Kumar.
Enterprise security teams are being pushed to track what AI agents can access and do across apps, identities and workflows before data is exposed.
The expansion gives IT teams central control over AI agent permissions, reducing risky static keys and easing reviews as workplace use widens.
Trusted third-party access has let attackers quietly pull large volumes of Salesforce records from enterprise systems via a Klue integration.
More than half of Vercel deployments are now triggered by coding agents, as monthly AI token traffic has jumped tenfold.
The tie-up adds tighter access checks as firms deploy AI agents and browser tools more widely, amid rising identity attacks.
Security teams may gain relief from manual identity investigations as Offroad targets risks from human, machine and AI access with USD $7 million.
Customers can now govern AI agents across mixed systems as Okta adds Bedrock support and lets firms keep existing identity providers.
Businesses struggling with fragmented records can now give AI agents a shared data layer, as Airbyte adds search and write tools for workflows.
The update lets app users cap, approve and audit AI-driven payments while keeping control of their funds and spending limits.
Small firms and solo founders now get guided Google Ads setup and optimisation, easing a marketing hurdle for businesses with limited staff.
Longer outages at developer tools now threaten release schedules and productivity, with GitProtect estimating more than USD $740,000 in losses.
Businesses can now let AI agents update Salesforce records and run tasks through Airbyte's new OpenAI Marketplace listing.
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
