FutureFive New Zealand - Consumer technology news & reviews from the future

OAuth Stories - Page 2

Global Stories

OAuth stories

Microsoft 365 EvilToken campaign hits hundreds daily
Multi-factor authentication

Microsoft 365 EvilToken campaign hits hundreds daily

Hundreds of Microsoft 365 users are being compromised daily as attackers bypass passwords with device code phishing and OAuth tokens.

By Shannon Williams • 4 min read • Thu, 9th Apr 2026
OpenID Foundation names Kantara as authorised auditor
Fintech

OpenID Foundation names Kantara as authorised auditor

Independent checks on digital identity products will now be carried out by Kantara as the OpenID Foundation expands its conformance programme.

By Joseph Gabriel Lagonsin • 3 min read • Sat, 28th Mar 2026
Vorlon launches tools for AI agent security response
Data Protection

Vorlon launches tools for AI agent security response

Security teams gain a forensic trail and workflow hub as Vorlon adds incident response tools for AI agents across SaaS apps and APIs.

By Catherine Knowles • 5 min read • Thu, 26th Mar 2026
Vorlon survey finds SaaS AI security gaps among CISOs
Data Protection

Vorlon survey finds SaaS AI security gaps among CISOs

Nearly all surveyed CISOs said they faced SaaS or AI security incidents in 2025, even as most rated their controls as strong.

By Shannon Williams • 5 min read • Thu, 26th Mar 2026
CData boosts Connect AI with secure MCP agent tools
Virtualisation

CData boosts Connect AI with secure MCP agent tools

CData upgrades Connect AI with managed MCP tools, tightening data access, identity controls and live connectivity for enterprise agents.

By Joseph Gabriel Lagonsin • 5 min read • Tue, 10th Mar 2026
OpenClaw AI assistant surge sparks major security fears
Malware

OpenClaw AI assistant surge sparks major security fears

A rapid surge in OpenClaw AI assistant use has left tens of thousands of exposed systems and a trail of hijacked tools and malicious add-ons.

By Catherine Knowles • 5 min read • Fri, 27th Feb 2026
AI-fuelled cyber attacks now steal data in 72 minutes
Firewalls

AI-fuelled cyber attacks now steal data in 72 minutes

AI-driven hackers can now steal data in just 72 minutes, as faster, multi-surface attacks overwhelm complex, over-trusting enterprises.

By Sofiah Nichole Salivio • 4 min read • Fri, 27th Feb 2026
Okta unveils tools to detect & govern shadow AI risks
Privileged Access Management

Okta unveils tools to detect & govern shadow AI risks

Okta launches Agent Discovery to uncover and rein in shadow AI agents, mapping risky app access and tightening identity-based controls.

By Sofiah Nichole Salivio • 4 min read • Fri, 13th Feb 2026
Okta users warned as ShinyHunters expand vishing wave
Ransomware

Okta users warned as ShinyHunters expand vishing wave

Okta users face rising vishing attacks as ShinyHunters expand real-time MFA phishing, prompting fresh SaaS and identity security warnings.

By Shannon Williams • 5 min read • Wed, 4th Feb 2026
Shadow AI assistant Clawdbot raises workplace risks
Unified Communications

Shadow AI assistant Clawdbot raises workplace risks

Shadow AI tool Clawdbot quietly spreads across workplaces, alarming security teams as staff grant it broad access on unmanaged devices.

By Mark Tarre • 4 min read • Thu, 29th Jan 2026
Experts warn AI era demands tougher data protection
Data Protection

Experts warn AI era demands tougher data protection

Experts say AI-driven attacks and rampant data leaks mean organisations must verify outputs, curb collection and harden identity controls.

By Shannon Williams • 8 min read • Fri, 23rd Jan 2026
Kubernetes accelerates large-scale phishing operations
Virtualisation

Kubernetes accelerates large-scale phishing operations

Criminals are using Kubernetes and cloud-native tools to rapidly scale phishing-as-a-service, targeting Gmail, Facebook and Microsoft O365.

By Joseph Gabriel Lagonsin • 3 min read • Tue, 13th Jan 2026
Proofpoint warns of surge in Microsoft device code phishing
EduTech

Proofpoint warns of surge in Microsoft device code phishing

Proofpoint flags a sharp rise in Microsoft 365 account takeovers via device code phishing, hitting firms from finance to government.

By Sean Mitchell • 5 min read • Thu, 8th Jan 2026
SaaS attacks surge as boards turn to AI for defence
Software-as-a-Service

SaaS attacks surge as boards turn to AI for defence

Cyber attacks on SaaS platforms are soaring, pushing boards to make AI‑driven security a core strategy as misconfigurations fuel mass breaches.

By Shannon Williams • 8 min read • Thu, 25th Dec 2025
CData, Microsoft unlock broad MCP data connectivity
Data Analytics

CData, Microsoft unlock broad MCP data connectivity

CData's Connect AI now enables Microsoft Copilot Studio agents to access and act on live data from 350+ enterprise systems, boosting AI-driven business insights.

By Jake MacAndrew • 3 min read • Fri, 21st Nov 2025
Weaponised OAuth apps allow persistent access to cloud accounts
Virtual Private Networks

Weaponised OAuth apps allow persistent access to cloud accounts

Proofpoint reveals how weaponised OAuth apps enable hackers to maintain cloud access despite password resets and MFA, threatening persistent account takeover.

By Melania Watson • 4 min read • Wed, 22nd Oct 2025
Google Workspace isn't built to handle shadow SaaS
Cloud Security

Google Workspace isn't built to handle shadow SaaS

Google Workspace's native tools struggle to manage unapproved SaaS apps, exposing firms to data risks amid rising shadow IT use.

By Dakshitaa Babu • 3 min read • Thu, 2nd Oct 2025
Barracuda warns of surge in advanced OAuth phishing
Firewalls

Barracuda warns of surge in advanced OAuth phishing

Barracuda warns of a surge in advanced OAuth phishing attacks exploiting Microsoft 365 and other platforms to steal access tokens and bypass multifactor authentication.

By Staff Writer • 3 min read • Thu, 25th Sep 2025
Delinea unveils open-source MCP Server to secure AI agent access
Physical Security

Delinea unveils open-source MCP Server to secure AI agent access

Delinea has launched its open-source MCP Server, enabling secure, policy-driven access for AI agents to manage credentials and workflows efficiently.

By Sean Mitchell • 3 min read • Wed, 24th Sep 2025