Storm-0940 AI Agent OAuth Breach - 3 Hours
Storm-0940 used ARTEX AI agent to breach ConnectWise OAuth in under 3 hours. Railway PaaS secrets exposed. VeloCloud zero-day patched.
Posts tagged: Oauth
eMudhra CA Keys Compromised - Forged Certs Now Possible
eMudhra CA private keys recoverable - forged certificates possible. ConnectWise resets all OAuth credentials after 173-tenant breach.
ConnectWise OAuth Breach Hits 173 M365 Tenants
ConnectWise OAuth supply-chain breach accessed 173 M365 tenants. OpenCode AI key leak and npm credential stealers targeting AI developers covered.
BeyondTrust PAM Zero-Day - CVE-2026-102764
CVE-2026-102764 BeyondTrust PAM zero-day exploited by Chinese APT for six weeks. Ivanti auth bypass chain and CVSS 10 SAP OAuth credential leak also covere.
Ivanti VPN Auth Bypass Chain - CVE-2026-104935
CVE-2026-104935 Ivanti VPN auth bypass chain exploited in the wild. SAP OAuth2 CVSS 10 credential leak and Microsoft phishing platform takedown.
F5 BIG-IP APM OAuth Zero-Day - CVE-2026-94127
CVE-2026-94127 gives attackers unauthenticated RCE on F5 OAuth servers. Microsoft dismantles EvilTokens PhaaS. Rogue MFA providers steal passwords.
Fake EDR Scam Burns Revolut - OAuth Token Theft
Revolut disclosed customer data to fraudsters via fake Emergency Data Requests. CVE-2026-85706 GitLab CVSS 10 hits KEV. OAuth tokens stolen from 31K users.
FreeIPA Anonymous-to-Admin Chain - Linux Identity
FreeIPA exploit chain gives anonymous users admin access to Linux domains. ChatGPT OAuth exfiltration and autonomous AI credential harvesting raise the bar.
Dropbox Breached via Lenovo SSO - OAuth Trust Chains Fail
Dropbox accounts breached through Lenovo SSO trust-chain flaw. Plus CVE-2026-83548 SonicWall CVSS 10 pre-auth RCE and 153M stolen driver's licenses.
Entra ID CVSS 10.0 RCE - CVE-2026-69836 Exploited
CVE-2026-69836 CVSS 10.0 RCE in Microsoft Entra ID exploited in the wild. Russian APTs abuse OAuth consent flows. Phishing moves inside Slack and Teams.