In today’s 2-Minute Tech Briefing, researchers flag fake Chrome productivity extensions stealing session tokens from Workday, NetSuite, and SuccessFactors. Satya Nadella argues Europe’s sovereignty ...

What makes Storm stand out is not simply the data it steals, but how it handles it. Earlier generations of stealers often ...

Google has rolled out new security measures to curb Workspace account takeovers, amid a surge in cookie and authentication token theft. Google says that it is introducing three enhancements to help ...

North Korean group Kimsuky is using QR code phishing to steal credentials Attacks bypass MFA via session token theft, exploiting unmanaged mobile devices outside EDR protections FBI urges ...

EvilTokens, a newly identified phishing-as-a-service operation, is offering cybercriminals a ready-made way to hijack Microsoft accounts by abusing a legitimate sign-in process rather than stealing ...

Session, the decentralized messaging platform known for its privacy-first approach, is entering a new phase. The team is preparing for a network transition, introducing the Session Token and migrating ...

Authentication tokens aren't actual physical tokens, of course. But when these digital identifiers aren't expired regularly or pinned for use by a specific device only, they may as well be made of ...

Recorded Future released its 2025 Identity Threat Landscape Report highlighting credential theft as the dominant initial ...