A newly identified Microsoft OAuth phishing campaign is changing the rules of phishing by eliminating one … Microsoft OAuth Phishing Campaign Uses Real Login Pages to Hijack AccountsRead more
SaaS security
Google Blocks Unrestricted Gemini API Keys After Billing Abuse Surge
Google is tightening Gemini API security after a surge in abuse cases where exposed API keys … Google Blocks Unrestricted Gemini API Keys After Billing Abuse SurgeRead more
Salesforce OAuth Attack Exploits Klue Integration to Steal CRM Data
A stealthy new Salesforce OAuth attack is exposing a critical weakness in how enterprises rely on … Salesforce OAuth Attack Exploits Klue Integration to Steal CRM DataRead more
Zero‑Auth Flaw Exposes DoD Contractor to Cross‑Tenant Data Breach
A critical security vulnerability has exposed a dangerous truth in modern application security: 👉 If your … Zero‑Auth Flaw Exposes DoD Contractor to Cross‑Tenant Data BreachRead more
High-Speed “Spider” Attacks Bypass MFA to Raid SaaS Data
A new breed of cyber adversary is moving away from traditional malware and focusing entirely on … High-Speed “Spider” Attacks Bypass MFA to Raid SaaS DataRead more
The “Pay or Leak” Ultimatum: Udemy in the Crosshairs
The education technology (EdTech) sector is facing a massive new security crisis. On April 24, 2026, … The “Pay or Leak” Ultimatum: Udemy in the CrosshairsRead more
Notion Data Leak Exposes Emails and Profiles on Public Pages
A newly exposed Notion data leak is raising serious privacy and security concerns for organizations using … Notion Data Leak Exposes Emails and Profiles on Public PagesRead more
Vercel Data Breach: OAuth Attack Exposes Internal Systems
The Vercel data breach has raised serious concerns across the developer and cybersecurity communities. A platform … Vercel Data Breach: OAuth Attack Exposes Internal SystemsRead more
Massive ShinyHunters Breach Puts 9M Records at Risk
The ShinyHunters data breach campaign is once again making headlines—this time targeting global giants like Zara, … Massive ShinyHunters Breach Puts 9M Records at RiskRead more
Microsoft 365 Mailbox Rules Abused in Email Attacks
Cybercriminals are increasingly abusing Microsoft 365 mailbox rules as a stealth persistence mechanism to silently monitor, … Microsoft 365 Mailbox Rules Abused in Email AttacksRead more