OAuth stories
Enterprises face growing breach and compliance risks as autonomous software bypasses static access controls and acts across systems without oversight.
AI agents are set to erode ad-funded web traffic, forcing businesses to pivot from screen-based funnels to metered API revenue.
New guidance aims to help firms curb data leakage and rogue actions as AI agents and models are embedded in daily operations.
Customers were urged to rotate secrets after unauthorised access to Vercel systems exposed a limited set of credentials via a third-party AI tool.
Malicious rules are helping hackers hide in Microsoft 365 inboxes, with Proofpoint saying it saw the tactic in 10% of taken-over accounts.
Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.
Independent checks on digital identity products will now be carried out by Kantara as the OpenID Foundation expands its conformance programme.
Security teams gain a forensic trail and workflow hub as Vorlon adds incident response tools for AI agents across SaaS apps and APIs.
Nearly all surveyed CISOs said they faced SaaS or AI security incidents in 2025, even as most rated their controls as strong.
CData upgrades Connect AI with managed MCP tools, tightening data access, identity controls and live connectivity for enterprise agents.
A rapid surge in OpenClaw AI assistant use has left tens of thousands of exposed systems and a trail of hijacked tools and malicious add-ons.
AI-driven hackers can now steal data in just 72 minutes, as faster, multi-surface attacks overwhelm complex, over-trusting enterprises.
Okta launches Agent Discovery to uncover and rein in shadow AI agents, mapping risky app access and tightening identity-based controls.
Okta users face rising vishing attacks as ShinyHunters expand real-time MFA phishing, prompting fresh SaaS and identity security warnings.
Shadow AI tool Clawdbot quietly spreads across workplaces, alarming security teams as staff grant it broad access on unmanaged devices.
Experts say AI-driven attacks and rampant data leaks mean organisations must verify outputs, curb collection and harden identity controls.
Criminals are using Kubernetes and cloud-native tools to rapidly scale phishing-as-a-service, targeting Gmail, Facebook and Microsoft O365.
Proofpoint flags a sharp rise in Microsoft 365 account takeovers via device code phishing, hitting firms from finance to government.
Cyber attacks on SaaS platforms are soaring, pushing boards to make AI‑driven security a core strategy as misconfigurations fuel mass breaches.
CData's Connect AI now enables Microsoft Copilot Studio agents to access and act on live data from 350+ enterprise systems, boosting AI-driven business insights.
