logins

Over 80,000 organizations have had their AI logins stolen: from shadow AI to LLMjacking

by
Over 80,000 organizations have had their AI logins stolen: from shadow AI to LLMjacking

The summer of 2026 taught the security industry a new term: the stolen AI login. As BleepingComputer reported, in late August, Anthropic responded to Infostealer’s takeover of Claude sessions by logging out users, deleting saved payment methods, and refunding charges identified as unauthorized. This is the supply side. SOCRadar’s AI Identity Exposure Report it’s about … Read more

Fraudulent third-party MFA providers can steal passwords during logins

by
Fraudulent third-party MFA providers can steal passwords during logins

Security researchers have developed an attack that allows hackers with privileged access to register a rogue third-party MFA provider that steals users’ passwords during legitimate login attempts. The technique, which Varonis Threat Labs calls TrustSink, can work with any vendor that relies on this external authentication model, although researchers demonstrated the attack using Microsoft Entra. … Read more