CVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identity
CVE-2026-92289: Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentials does not verify the client secret
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First
How device code phishing gives scammers access to your account
3 min
OAuth Token Theft Through Microsoft's Front Door | Huntress
15 min
Microsoft Warns of EvilTokens AI Phishing Service Hijacking Thousands of Accounts
Aembit Launches Support for Okta Cross App Access, Extending Enterprise Identity Controls to AI Agents
3 sources 3 min
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
3 sources in the wild
Beware these fake websites selling subscriptions to AI assistants
3 sources 3 min
Webinar tomorrow: Inside real-world Google Workspace breaches
3 min
Revoking the token didn’t kill the backdoor
in the wild 5 min
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories
in the wild 4 min
MFA Won't Save You From OAuth Consent Abuse
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
in the wild 3 min2
Webinar: Which Google Workspace security controls actually matter?
3 min
12 Best SSPM Tools Compared (2026): Features & Pricing
2 sources 10 min
Characterizing Network Centralization and Observability in the Remote MCP Ecosystem
1
GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds
in the wild 6 min5
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
in the wild 5 min3
Webinar: What happens in the first hours of a Google Workspace breach
3 min
NIST Issues New Guidance to Protect SSO and API Tokens From Theft and Forgery
2 sources 3 min
The modern attack chain: Rethinking Google Workspace security in the age of AI
in the wild 8 min