Researchers have discovered a flaw in Google’s OAuth system that could allow attackers to access potentially sensitive data from former employee accounts at defunct startups. Google’s OAuth is the ...

In recent weeks, major companies like Palo Alto Networks, Zscaler, Cloudflare, and SpyCloud have all confirmed they were ...

Threat researchers report that "a widespread data theft campaign" traces to attackers stealing OAuth access tokens for ...

An as-of-yet undiagnosed compromise of the Salesloft Drift AI-driven platform has led to a rash of stolen OAuth tokens, in turn creating downstream breaches at some of the biggest names in the ...

Data breaches resulting from a recent supply chain attack to Salesloft Drift are being reported by Palo Alto Networks, ...

Attackers used custom Python tools, Tor for obfuscation and log deletion techniques to evade detection. Palo Alto Networks ...

ShinyHunters compromised Google, Qantas & dozens more using OAuth device flow attacks—bypassing MFA without exploiting a single software bug. My deep-dive analysis reveals how they did it and what ...