DevSecOps

2 articles on DevSecOps.

Subscribe by RSS

• AppSec

  The Salesloft/Drift OAuth Breach: When Your SaaS Integrations Become Attack Vectors

  February 5, 2026

  The Salesloft/Drift OAuth breach compromised 700+ organizations through weaponized tokens. Six months of silent credential harvesting via SaaS-to-SaaS trust.

• AppSec

  Stop Treating LLM Agents as Trusted Users: Lessons from GitLab CVE-2021-39935

  February 4, 2026

  CISA added CVE-2021-39935 to the KEV catalog in February 2026. LLM agents with broad API access inherit every vulnerability in your attack surface.