OAuth Stories

American Stories

OAuth stories

Privileged Access Management

Reco to brief Black Hat on AI agent security risks

Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.

By Joseph Gabriel Lagonsin • 4 min read • This month

Software-as-a-Service

Ransomware victims surge to 7,551 as attacks fragment

Ransomware attacks spread through vendor systems and AI-aided tactics, leaving 7,551 publicly disclosed victims in the latest 12-month period.

By Sean Mitchell • 4 min read • Last month

Customer Relationship Management

Airbyte adds action-taking AI agents to OpenAI marketplace

Businesses can now let AI agents update Salesforce records and run tasks through Airbyte's new OpenAI Marketplace listing.

By Mark Tarre • 3 min read • Last month

Global Stories

OAuth stories

Malware

Google flags Russian spies abusing real login features

Personal accounts used by researchers and officials are being hit by Russian-linked groups, exposing institutions to stealthy account theft and malware.

By Joseph Gabriel Lagonsin • 5 min read • Last week

Cloud Security

Google Cloud warns startups on AI scaling pitfalls

Startups risk leaked keys, quota throttling and surprise bills unless they tighten controls as AI prototypes move into production.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Software-as-a-Service

Google links Looker to Gemini Enterprise for chat data

Employees can now query governed business metrics and documents in one chat, while Looker permissions still apply in Gemini Enterprise.

By Mark Tarre • 4 min read • This month

Privileged Access Management

BeyondTrust adds AI identity controls to Pathfinder

Security teams must now track AI agents and machine accounts as well as staff, as BeyondTrust expands Pathfinder to cover privileged access.

By Joseph Gabriel Lagonsin • 4 min read • This month

Software-as-a-Service

Reco named OpenAI Select Partner amid AI security concerns

Enterprise security teams face fresh oversight burdens as Reco joins OpenAI's partner network to monitor agent access and permissions.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Software-as-a-Service

Attackers exploit trusted credentials in email fraud surge

Email fraud is now the top incident type, accounting for 45% of cases as attackers bypass multi-factor authentication with stolen credentials.

By Mark Tarre • 4 min read • Last month

Virtual Private Networks

APT28-linked campaign hijacks hotel Wi-Fi for logins

Corporate travellers at hotels and conference centres were quietly sent to fake Microsoft 365 pages after attackers took over guest Wi-Fi gateways.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Digital Transformation

ThreatDown adds shadow AI & identity tracking tools

Security teams face higher breach costs as ThreatDown expands visibility over unsanctioned AI tools and machine accounts in one console.

By Mark Tarre • 4 min read • Last month

Data Protection

Salt Security expands Policy Hub to 100 AI policies

Enterprise teams can now switch on controls for AI agents and APIs faster, with Salt Security bundling 100 pre-built policies into its Policy Hub.

By Mark Tarre • 4 min read • Last month

Multi-factor authentication

Phishing toolkits target Microsoft 365 MFA in surge

Account takeovers are becoming harder to stop as attackers use real-time code theft and fake login pages to bypass Microsoft 365 MFA.

By Mark Tarre • 5 min read • Last month

Network Security

Proofpoint spots Entra ID spoofing attack technique

Attackers can now probe Entra ID accounts and passwords at scale without a real app, leaving defenders with little sign-in telemetry.

By Sean Mitchell • 4 min read • Last month

Software-as-a-Service

AWS Builder Centre expands with free sandbox workshops

Free workshop sandboxes should make it easier for developers to try AWS training without a personal account, credit card or cleanup.

By Sean Mitchell • 5 min read • Last month

Software-as-a-Service

Google opens Marketplace path for AI agents in Gemini

Enterprises can now buy and register third-party AI agents through Google Cloud Marketplace for use inside Gemini Enterprise.

By Mark Tarre • 4 min read • Last month

Data Protection

Vivek Kumar unveils framework for AI connector risks

Enterprise AI deployments may be exposing sensitive data through overlooked connector permissions, according to a new governance framework from Vivek Kumar.

By Joseph Gabriel Lagonsin • 4 min read • Last month