A single deceptive permission grant can compromise an entire enterprise cloud tenant. Specifically, Proofpoint researchers uncovered the BluePhishing Entra Agent attack targeting corporate artificial intelligence deployments. Through this technique, adversaries spawn up to 250...
The password is no longer the main barrier: EvilTokens made users themselves confirm access for attackers on a genuine Microsoft page, then handed its clients working tokens. Over several months, the platform helped compromise...
The market intelligence platform Klue has confirmed a breach of part of its integration infrastructure. Attackers obtained OAuth tokens, the digital keys that grant access between services. With those keys, they slipped into the...
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft 365 credentials. Eschewing traditional password theft, these adversaries coerce victims into voluntarily granting account access via...
As the parliamentary elections loom in Armenia, cyberespionage has unequivocally thrust itself back to the vanguard. CyberHUB-AM has chronicled a surgical phishing campaign directed against the luminaries of Armenian civil society. The incursion was...
Salesloft has announced the restoration of its integration with Salesforce following the incident linked to the Drift platform and its associated technologies. As of the evening of September 7, 2025, synchronization between Salesloft and...
Drift has disclosed details of a security incident involving its Salesforce integration. Between August 8 and August 18, 2025, an unknown actor exploited OAuth credentials to extract data from customer Salesforce instances. According to...
Threat actors operating under the name ShinyHunters have orchestrated a series of cyberattacks targeting major corporations, including Qantas, Allianz Life, LVMH, and Adidas. Each incident centers around attempts to infiltrate client Salesforce environments through...
