#authentication-tokens

[ follow ]
#api-security #token-encryption #authorization #azure-devops #red-hat-breach #github-repositories
Privacy technologies
fromAzure DevOps Blog
3 days ago

Authentication Tokens Are Not a Data Contract - Azure DevOps Blog

Authentication tokens should only validate authorization, not serve as data interfaces; upcoming encryption will make token payloads unreadable, breaking applications that decode token claims.
Information security
fromTheregister
5 months ago

Red Hat repos raided, claims cybercrew, files stolen

Claimed breach of Red Hat private GitHub repos exposed ~570GB including CERs with architecture diagrams, configuration details, authentication tokens, and potential downstream customer compromises.
Information security
fromArs Technica
6 months ago

Google warns that mass data theft hitting Salesloft AI agent has grown bigger

All authentication tokens connected to Salesloft Drift should be treated as potentially compromised after attackers accessed Google Workspace email using stolen credentials.
[ Load more ]