Hackers exploited a compromised npm package to breach cloud systems and gain full AWS administrator access within 72 hours.

Facebook has announced that it found no evidence that attackers had used stolen account access tokens on other websites or apps that enable users to access their accounts using Facebook Login. This ...

Identity and access company Okta has identified “adversarial activity” that leveraged access to a stolen credential to access Okta’s support case management system. The threat actor was able to view ...

Apple demoed technology at WWDC 2022 called Private Access Tokens — and they could potentially kill CAPTCHAs once and for all. Private Access Tokens (PAT) can prove when an HTTP request is coming from ...

Hackers with Amazon users’ authentication tokens could’ve stolen or encrypted personal photos and documents. The Amazon Photos app for Android insufficiently protected user access tokens, according to ...

Identity and access giant Okta said a hacker broke into its customer support ticket system and stole sensitive files that can be used to break into the networks of Okta’s customers. Okta chief ...