Microsoft Threat Intelligence identified threat actor activity with overlapping tradecraft commonly associated with ...

Odoo is the best free inventory management software overall, but Square, Zoho, Toast, Loyverse, and SalesBinder fit different ...

Two patched RabbitMQ vulnerabilities could leak OAuth client secrets, bypass access controls, and expose enterprise messaging ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

The identity layer for AI agents is finally being built. What MCP, A2A and new research delivered since March, and what's ...

The ChatGPT Work rollout comes alongside the debut of the new GPT-5.6 model, a new model that OpenAI promises provides ...

Hackers used a backdoor through a little-known third-party app to steal LastPass customer data.

An attacker broke into competitive-intelligence vendor Klue, stole OAuth tokens its customers use to connect to Salesforce and other platforms, and accessed data across multiple customer environments ...

ReliaQuest observed attackers generating OAuth tokens and using Python scripts to query Salesforce's API for extended periods, as data was stolen. Huntress later disclosed that its own Salesforce ...

Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign. Sources ...

More Salesforce instances have been breached by threat actors abusing a third-party application integration, this time through Klue's Battlecards app. The attacks, which are the latest in a series of ...