OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516

Air Canada has confirmed being impacted by a data breach that compromised some of its employees' limited personal data and other records, reports The Record, a news site by cybersecurity firm Recorded Future.

GitHub has introduced passkeys for general availability two months after the feature was released in beta as part of its efforts to bolster phishing protections with wider passwordless security adoption, according to BleepingComputer.

T-Mobile has disclosed that personal and payment information from fewer than 100 of its customers were exposed as a result of a system error and not due to a cyberattack or data breach, according to CNET.