Earlier this month, the now viral social network Moltbook exposed 1.5 million API authentication tokens and 35,000 email ...

Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access.

Self-hosted agents execute code with durable credentials and process untrusted input. This creates dual supply chain risk, ...

Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device ...