Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds

New VentureBeat survey data: 69% of enterprises share AI agent credentials, letting one compromised agent inherit the access ...

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining ...
SDxCentral

AT&T, T-Mobile US, and Verizon ditch SMS for network-based authentication

Pan-operator telecom API venture Aduna launched a network based authentication system aiming to replace SMS one-time ...

CISA orders feds to prioritize patching Langflow auth bypass flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively ...
The Hacker News

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...
Security Boulevard

5 Fast-Growing CIAM Providers Reshaping Identity Management in 2026

Okta and Microsoft no longer define the CIAM market alone. Five developer-first, passwordless-native, and AI-ready platforms are growing fast by solving the specific problems the incumbents leave ...