Tag: Identity Security
Compromised service principals let Storm-3168 ravage Azure tenants
Microsoft tied a destructive Azure campaign to the agentic crew JADEPUFFER, which abused two hijacked service principals to wipe cloud…
One in five water utilities has logins sitting in infostealer logs
SpyCloud found 1,787 of roughly 10,000 US water organizations exposed, including one infected device holding logins for 167 utility tenants.
GhostCode phish turns a device code into a Microsoft 365 takeover
GhostCode abuses Microsoft's device authorization flow to obtain tokens and register attacker hardware inside a victim tenant.
Okta buys Permiso to pair identity posture with threat detection
Okta's deal for Permiso Security merges identity threat detection with posture management as AI agents multiply.
Cyera buys Oasis Security for $1B in identity-data merger
Data security company Cyera agreed to acquire agentic access management provider Oasis Security in a $1 billion deal.
Hackers spoofed 3.7 million OAuth client ids to enumerate entra ID users
Attackers used 3.7 million spoofed OAuth client IDs to enumerate Entra ID user accounts and map application ecosystems.