Subtitle Icon
Blog Tag

OAuth Risk

Blog Meta Icon
June 19, 2026
Blog Meta Icon
15 minute read

Drift. Gainsight. Now Klue. And This Time, It Wasn't ShinyHunters.

For the third time in ten months, attackers drained Salesforce data through a trusted app. The first two were ShinyHunters. This one wasn’t — and that is why it matters.

Blog Meta Icon
May 5, 2026
Blog Meta Icon
12 minute read

Shadow AI Agents Are Your New Attack Surface

Employees are running unauthorized AI agents with admin access to email, files, calendars, and CRM. The shadow AI attack surface most enterprises don't measure.

Blog Meta Icon
March 4, 2026
Blog Meta Icon
13 min read

AI Tools With Company Keys: The Vercel Breach

When AI tools get the keys to your company: the Vercel breach exposed the API credentials AI agents need to function — and how attackers chained that access.