Cybersecurity

Someone Just Minted Themselves Admin Access to Thousands of Companies

A JFrog Artifactory bug lets attackers skip login entirely — and mint admin tokens for the software supply chain thousands of companies run on.

Software Supply Chain

The Apps on Your Phone Are Installing Themselves Now. They're Also Stealing From Each Other

A self-spreading worm just ran through the tools developers use to build every app you touch. Here's what that means for you — and what to do about it.

AppSec

Your Token Budget Just Became Your Attack Surface

The Vercel breach wasn't a credential failure. It was a token problem — and your IAM program probably can't see it.

Oauth Security

Cybersecurity

Someone Just Minted Themselves Admin Access to Thousands of Companies

The Apps on Your Phone Are Installing Themselves Now. They're Also Stealing From Each Other

Your Token Budget Just Became Your Attack Surface

STAY CONNECTED