Vercel breach exposes the OAuth gap most security teams cannot detect, scope or contain

One employee at Vercel adopted an AI tool. One employee at that AI vendor got hit with an infostealer. That combination created a walk-in path to Vercel’s production environments through an OAuth gr [...]

Stellantis confirms data breach involving customers' contact information

Stellantis — the parent of several auto brands including Dodge, Ram and Chrysler — said customers' personal information was included in a data breach. The automaker said in a statement that & [...]

T-Mobile is under fire again over its 2021 data breach

T-Mobile is once again being sued by Washington state over the 2021 data breach which exposed sensitive information for over 79 million people, The Verge reports. The lawsuit filed on Monday alleges t [...]

The best password manager for 2025

Recently, we saw all the ways reused passwords can harm your security posture. The 23andMe attack comes to mind, but generally credential stuffing has been on the rise. Hackers can buy or find your re [...]

Bipartisan GUARD Act proposes age restrictions on AI chatbots

US lawmakers from both sides of the aisle have introduced a bill called the "GUARD Act," which is meant to protect minor users from AI chatbots. "In their race to the bottom, AI compani [...]

While everyone talks about an AI bubble, Salesforce quietly added 6,000 enterprise customers in 3 months

While Silicon Valley debates whether artificial intelligence has become an overinflated bubble, Salesforce's enterprise AI platform quietly added 6,000 new customers in a single quarter — a 48% [...]

France's national agency for managing IDs and passports suffered a data breach last week

The French government confirmed that France Titres, also known as Agence nationale des titres sécurisés (ANTS), experienced a security breach last week. France Titres disclosed that it detected a da [...]

Proton launches 'Data Breach Observatory' to track personal info leaks

Proton, the company behind Proton VPN and other encrypted apps like Proton Mail and Proton Drive, just launched a new web page called the Data Breach Observatory that aims to make accurate cybercrime [...]

Plex tells users to change their passwords after data breach

The Plex streaming platform has experienced a security breach and is telling customers to change their passwords "immediately." They also suggest that users enable two-factor authentication [...]