As awareness grows around many MFA methods being “phishable” (i.e. not phishing resistant), passwordless, FIDO2-based authentication methods (aka. passkeys) like YubiKeys, Okta FastPass, and Windows ...

Proofpoint observed campaigns impersonating trusted brands like SharePoint and DocuSign with malicious OAuth applications to get into Microsoft 365 accounts. Threat actors have cooked up a clever way ...

Palo Alto Networks (NASDAQ:PANW) confirmed a data breach after attackers used stolen OAuth tokens from the Salesloft Drift compromise to access its Salesforce Inc (NYSE:CRM) system. PANW is trading ...