Application securityResearchers find 16 browser extensions stealing ChatGPT session tokensLaura FrenchJanuary 27, 2026One of the malicious ChatGPT “mods” has a featured badge on the Chrome Web Store.
IdentityThe CX puzzle: How convenience, trust, and identity fit together amid agentic AIMichael HubbardJanuary 21, 2026Security must be built into CX to reduce friction and earn trust as AI agents grow.
IdentityPhishing campaign exploits LinkedIn messages via DLL sideloadingSteve ZurierJanuary 20, 2026Attackers exploit the trusted professional social media platform to deploy a remote access trojan.
IdentityWorkday, NetSuite and SuccessFactors sessions targeted by malicious Chrome extensionsLaura FrenchJanuary 20, 2026Five related extensions were found to steal cookies and block platform security pages.
IdentityBeyond MFA: Securing the human element with identity threat detectionPaul WagenseilJanuary 16, 2026Even the strongest forms of MFA can now be bypassed. Here's why it's time to move on to identity threat detection.
Threat ManagementRussia-linked APT28 targets energy and defense groups tied to NATOSteve ZurierJanuary 12, 2026Active since 2004, APT28’s sustained campaign for the past year focused on credential harvesting.
IdentityThe credential crisis: How trusted access became the biggest enterprise riskGuy KozlinerJanuary 6, 2026Identity attacks are the new breach engine — secure logins, tokens, and vendors or risk 2026.
