NIST IR 8587 addresses token security as a non-human identity problem, warning that API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can grant direc…
Sysdig researchers coined the term LLMjacking in 2024 after observing attackers using stolen cloud credentials to access cloud-hosted LLM services, with one worst-case configuration involving unauthor…
Lunar, a security platform, has developed a method to parse and verify exposed non-human identities (NHIs) such as API keys, cloud tokens, and payment secrets from infostealer logs, which often contai…
A report from Lunar Cyber reveals that hootsuite.com suffered a significant credential exposure event, with over 346,000 total events, including 346,082 client accounts and 400 employee accounts compr…
IBM's 2026 Cost of a Data Breach Report reveals that one in four malicious breaches involved AI, with AI-driven attacks up 56% and averaging $6.04 million per incident, while deepfake impersonation ac…