Slashid
slashid.dev
As featured in
Claim pageClaim
Follow
Overview
News
Salaries
Products
People
Growth
Offices
Financials
News
Breaking MCP at the Identity Layer
Part 2 of a two-part series on MCP security. a class="ilink" href="/blog/mcp-implementation-layer"Part 1/a attacked the server itself - sandbox escapes, command injection, and the supply chain. This part assumes all of that is patched. We break in through
Read more
Report
When the MCP Server Is the Payload: Attacking MCP at the Implementation Layer
This is Part 1 of a two-part series on MCP security. This part attacks the server itself - sandbox escapes, command injection, and the supply chain. Part 2 assumes everything here is patched and breaks the identity layer instead. General MCP architecture
Read more
Report
The Illicit Consent Grant Part 2: Device-Code Phishing and the AI PhaaS Wave
Summary This post follows on from Part 1: Understanding Modern OAuth Consent Phishing . Part 1 showed the attack done by hand. This part shows how its close cousin - device-code phishing - works, and how that same attack is now sold as a ready-made kit, w
Read more
Report
The Illicit Consent Grant Part 1: Understanding Modern OAuth Consent Phishing
1. Introduction An illicit consent grant ( MITRE ATT&CK T1528 , Steal Application Access Token) abuses OAuth 2.0's delegated authorization model. In that model, an application asks the identity provider - Entra ID, Google, or Okta - for permission to act
Read more
Report
Analysis of the 2026 Stryker Breach: Weaponizing Cloud Endpoint Management
On March 11, 2026, the medical technology enterprise Stryker Corporation experienced an enterprise-scale cyberattack that bypassed conventional security perimeters, causing severe global disruption to its Microsoft-managed corporate environment. Rather th
Read more
Report
Security Leaders Discuss the Vercel Breach
Following the news of the Vercel data breach, security experts are discussing implications, sharing their insights, and weighing in on what this incident suggests about the future of attack patterns.
Read more
Report
SlashID Launches Mutual TOTP, the First Cryptographic Verification Solution Built to Stop Vishing and Social Engineering Attacks
SlashID, the platform that secures every identity, today announced the launch of Mutual Time-based One-time Password (TOTP). This is the first cryptographic verification capability that simultaneously confirms the identity of both parties in any human-to-
Read more
Report
SlashID Launches Mutual TOTP, the First Cryptographic Verification Solution Built to Stop Vishing and Social Engineering Attacks
/PRNewswire/ -- SlashID, the platform that secures every identity, today announced the launch of Mutual Time-based One-time Password (TOTP). This is the first...
Read more
Report
SlashID Launches Mutual TOTP, the First Cryptographic Verification Solution Built to Stop Vishing and Social Engineering Attacks
Read more
Report
Vercel April 2026 Security Incident: How a Compromised OAuth App Led to a Major Breach
Introduction On April 19, 2026, Vercel disclosed a security incident originating from the compromise of Context.ai , a third-party AI tool. An attacker exploited a compromised OAuth 2.0 application registered by Context.ai to take over a Vercel employee's
Read more
Report
Show more news