NIST IR 8587 addresses token security as a non-human identity problem, warning that API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can grant direc…
Sysdig researchers coined the term LLMjacking in 2024 after observing attackers using stolen cloud credentials to access cloud-hosted LLM services, with one worst-case configuration involving unauthor…
Lunar Cyber launched Token Exposure Monitoring, a capability that identifies, attributes, and validates non-human identities and machine credentials in infostealer logs, connecting them to affected or…
A report from Lunar Cyber reveals that hootsuite.com suffered a significant credential exposure event, with over 346,000 total events, including 346,082 client accounts and 400 employee accounts compr…