OAuth stories
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
Security teams may gain relief from manual identity investigations as Offroad targets risks from human, machine and AI access with USD $7 million.
Customers can now govern AI agents across mixed systems as Okta adds Bedrock support and lets firms keep existing identity providers.
Businesses struggling with fragmented records can now give AI agents a shared data layer, as Airbyte adds search and write tools for workflows.
The update lets app users cap, approve and audit AI-driven payments while keeping control of their funds and spending limits.
Small firms and solo founders now get guided Google Ads setup and optimisation, easing a marketing hurdle for businesses with limited staff.
Longer outages at developer tools now threaten release schedules and productivity, with GitProtect estimating more than USD $740,000 in losses.
Enterprises face growing breach and compliance risks as autonomous software bypasses static access controls and acts across systems without oversight.
AI agents are set to erode ad-funded web traffic, forcing businesses to pivot from screen-based funnels to metered API revenue.
New guidance aims to help firms curb data leakage and rogue actions as AI agents and models are embedded in daily operations.
Customers were urged to rotate secrets after unauthorised access to Vercel systems exposed a limited set of credentials via a third-party AI tool.
Malicious rules are helping hackers hide in Microsoft 365 inboxes, with Proofpoint saying it saw the tactic in 10% of taken-over accounts.
Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.
Independent checks on digital identity products will now be carried out by Kantara as the OpenID Foundation expands its conformance programme.
Security teams gain a forensic trail and workflow hub as Vorlon adds incident response tools for AI agents across SaaS apps and APIs.
Nearly all surveyed CISOs said they faced SaaS or AI security incidents in 2025, even as most rated their controls as strong.
CData upgrades Connect AI with managed MCP tools, tightening data access, identity controls and live connectivity for enterprise agents.
A rapid surge in OpenClaw AI assistant use has left tens of thousands of exposed systems and a trail of hijacked tools and malicious add-ons.
AI-driven hackers can now steal data in just 72 minutes, as faster, multi-surface attacks overwhelm complex, over-trusting enterprises.
Attackers are now moving fast enough that patching delays, standing privilege and inherited trust leave organisations exposed within minutes.
