SecurityNewn8n Flaw Risks Multi-Issuer Hijacking
A critical identity-binding vulnerability in n8n's token exchange process allowed unauthorized account access across trusted issuers.
> Search
13 results for “identity”
SecurityNew
SecurityOak Aims to Reshape Identity Governance
Freshly emerged from stealth, Oak secures $60 million to tackle identity fragmentation across human, AI, and machine vectors.
SecurityRansomware’s Pivot to Identity Theft
New findings reveal that compromised credentials are now the primary catalyst for ransomware breaches, eclipsing software flaws.
SecurityCrypto Wallets Are Leaking Identity Data By Design, Researchers Say
A study of 85 browser-based wallets reveals systemic privacy flaws that allow for cross-site tracking and the de-anonymization of users.
SecurityThe Silent OAuth Exploit Bypassing Cloud Identity Defenses
Threat actors are weaponizing OAuth client ID spoofing to validate stolen credentials while remaining invisible to standard telemetry.
SecurityBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
Cyber CrimeUnmasking the Administrator Behind The Gentlemen Ransomware Gang
A deep dive into the operational identity and recruitment tactics driving one of the fastest-growing ransomware-as-a-service groups.
Cyber CrimeStudent Loan Data Exposure Risk Amplified by Forgiveness Scams
A breach at Nelnet Servicing has compromised the personal information of millions, creating a prime target for future phishing.
SecurityMastering Entra ID Defense Through Gamified Simulation Training
Varonis Threat Labs launches an interactive capture-the-flag experience to teach security teams how to combat modern identity attacks.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
DealsJune 2026 M&A Surge Highlights Heavy Industry Pivot Toward AI Security
A flurry of 37 cybersecurity acquisitions in June 2026 underscores how major tech firms are rapidly integrating AI and identity governance.
Cyber CrimeVishing to Data Heist: Helix Group Elevates SharePoint Extortion Threat
A sophisticated new group named Helix leverages identity-based phishing and MFA abuse to infiltrate corporate SharePoint environments, exfiltrating sensitive data for extortion or sale.