Tag: Authentication
Britain nudges 23 million One Login users toward passkeys
GOV.UK One Login is opening passkeys to more than 23 million users, letting them sign in without a password.
Stolen AI session tokens let thieves skip the login step
Okta found thousands of live AI session tokens in a stealer log, letting thieves replay their way into paid tools.
Brevo SSO flaw let attackers phish 347,000 Trezor customers
A flaw in Brevo's single sign-on handling let an attacker blast phishing mail to 347,000 Trezor customers.
iAuthFlow V2 kit keeps access alive with attacker passkeys
A new phishing kit enrolls attacker passkeys to keep access after password resets.
Malware borrows Windows Hello keys for persistent cloud access
Malware can borrow Windows Hello for Business keys to open a 90-day persistence channel into Entra ID.
GitHub Outage Blocks Developers from Automation Services
A widespread authentication failure at GitHub on May 26, 2026, halted software delivery by blocking access to Actions and Pages…
29 Million Secrets Exposed in 2025: The AI Agent Credential Crisis
In 2025, the number of hardcoded secrets exposed in public repositories surged 47% year-over-year to 28.7 million, driven by the…