SURIQTopic
OAuth & SaaS tokens
OAuth token abuse, connected-app compromise, and the identity layer behind SaaS integrations.
All topics Detection & threat huntingAI & LLM securityMalware & C2Remote code executionActive exploitationEdge & VPN securityData breachesPrivilege escalationRansomwareSupply-chain attacksWordPress securityPatch managementVulnerable drivers (BYOVD)Takedowns & law enforcementOAuth & SaaS tokensZero-days
Security news
This login library let a stranger sign in as you with just your email
CVE-2026-49757 (CVSS 9.2) let attackers take over accounts in Elixir apps built on ash_authentication by matching users on email instead of identity. Update
Security news
Your Salesforce wasn't breached. A connected app handed over the data.
The Icarus group stole Salesforce CRM data through Klue's connected app, not a Salesforce flaw. Why OAuth integration tokens are the unmonitored attack surface.
Ready to meet the Guardians?
Deploys fast - agentless for monitoring and cloud, a lightweight agent for deep endpoint security. Just Suriq, standing watch.