The new contract is designed to evolve the service into a next-generation, modular architecture enabling identity proofing, ...

Abstract: OpenID Connect (OIDC) is a widely used authentication standard for the Web. In this work, we define a new Identity Certification Token (ICT) to enable end-to-end user authentication by using ...

Apps that wish to implement SMART on FHIR need to invest in dedicated and ongoing expertise in complex standards like OAuth and OpenID Connect, implement user consent management, and securely manage ...

The August 2025 Salesloft Drift breach demonstrates a systemic security blind spot across all industries: third-party delegated access through OAuth integrations. Over 700 organizations — including ...

Abstract: The Plug-and-Charge (PnC) standard defined in ISO 15118 facilitates simple Electric Vehicle (EV) charging with modern Charge Points (CPs). When drivers plug in their EV into a CP, the EV ...

Salesloft says attackers first breached its GitHub account in March, leading to the theft of Drift OAuth tokens later used in widespread Salesforce data theft attacks in August. Salesloft is a widely ...

Google Threat Intelligence Group (GTIG) warns that attackers are stealing OAuth tokens via Salesloft Drift integrations in a massive Salesforce data theft. Alphabet’s GTIG and Mandiant attributed the ...

The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many ...

Google is advising users of the Salesloft Drift AI chat agent to consider all security tokens connected to the platform compromised following the discovery that unknown attackers used some of the ...

Google Identifies ‘Widespread Data Theft’ Impacting Salesforce-Salesloft Drift Users Your email has been sent A previously unidentified threat actor, UNC6395, has been linked to a recent breach ...

A threat actor managed to obtain Salesforce OAuth tokens from a third-party integration called Salesloft Drift and used the tokens to download large volumes of data from impacted Salesforce instances.

Envoy Go extension plugin that provides complete OAuth2/OpenID Connect authentication flow for your services. It handles authentication, token validation, session management, and integrates seamlessly ...