Device code phishing abuses the OAuth device flow, and Google and Azure produce strikingly different attack surfaces. Register for Huntress Labs' Live Hack to learn about attack techniques, defensive ...

Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...

The Internet Engineering Task Force (IETF) --the organization that develops and promotes Internet standards-- has approved three new standards this week designed to improve the security of ...

Joel Snyder, Ph.D., is a senior IT consultant with 30 years of practice. An internationally recognized expert in the areas of security, messaging and networks, Dr. Snyder is a popular speaker and ...

Google-owned tech company, Motorola has unveiled a prototype vitamin tablet which enables your entire body to function as an authentication token. The pill was introduced by Regina Dugan, former ...

The authentication layer that corporate America spent a decade building is now a liability. Listen to the podcast:The day MFA ...

Microsoft Teams stores authentication tokens in unencrypted plaintext mode, allowing attackers to potentially control communications within an organization, according to the security firm Vectra. The ...

Application programming interfaces (APIs) are integral to the functionality of the internet today. By enabling communications between programs, they make many processes more efficient and convenient, ...

ABERDEEN PROVING GROUND, Md. -- The Army Futures Command, or AFC, is developing wearable identity authentication and authorization technologies that will enable Soldiers to securely access ...

Look out, Frodo — we might have a new "One Ring to rule them all." Token, a new smart ring, promises to give its wearers a chance to make mobile payments, unlock doors, and ditch their passwords — all ...