OAuth tokens without expiry enable breaches like Drift attack on 700+ firms, bypassing MFA and exposing sensitive data.

Join the event trusted by enterprise leaders for nearly two decades. VB Transform brings together the people building real enterprise AI strategy. Learn more Last week, GitHub Security researchers ...

GitHub has revealed that dozens of organizations were compromised by a data thief that used stolen OAuth tokens to access their private repositories. The developer platform’s security team opened an ...

GitHub says it notified all organizations believed to have had data stolen from their private repositories by attackers abusing compromised OAuth user tokens issued to Heroku and Travis-CI. "As of ...

A Vercel employee's AI tool OAuth grant gave attackers access to internal systems via a four-hop kill chain. Here's what ...

A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach ...

The April 2026 Vercel security incident continues to extend past initial claims. The incident, which was said to involve what ...

Vercel has confirmed that its recent security incident compromised more accounts than initially reported, tracing the breach to a third-party AI tool infected with Lumma Stealer malware. The attack ...