api
85 articles with this tag
CRITICAL
INFO
LOW
HIGH
HIGH
INFO
INFO
INFO
HIGH
HIGH
HIGH
HIGH
INFO
INFO
INFO
INFO
INFO
INFO
HIGH
INFO
HIGH
INFO
INFO
HIGH
INFO
CRITICAL
INFO
CRITICAL
INFO
HIGH
CRITICAL
MEDIUM
HIGH
MEDIUM
INFO
HIGH
INFO
INFO
CRITICAL
INFO
INFO
HIGH
INFO
CRITICAL
INFO
MEDIUM
MEDIUM
HIGH
INFO
MEDIUM
INFO
INFO
INFO
MEDIUM
INFO
HIGH
MEDIUM
CRITICAL
HIGH
MEDIUM
HIGH
INFO
HIGH
MEDIUM
LOW
LOW
LOW
INFO
INFO
HIGH
INFO
INFO
INFO
MEDIUM
CRITICAL
INFO
INFO
INFO
HIGH
INFO
INFO
INFO
HIGH
LOW
INFO
NCSC-2026-0367 [1.00] [H/H] Kwetsbaarheid verholpen in GitLab Community en Enterprise Editions
The ultimate guide to hacking APIs in 2026 has been updated
This Key Will Self-Destruct: An Open Standard for Revocable API Keys
METR discloses 2 security incidents, including $600,000 model credit theft
Attackers Steal METR API Key and Consume AI Credits Worth About $600,000
Kubernetes v1.37: Storage Version Migration Enabled by Default
How to Evaluate API Security and Abuse Detection Platforms
Kubernetes v1.37: Metrics API graduates to stable
PayRange API
AWS patches flaw in 7 SDKs
Tata’s B2B platform returned OTPs in API responses
Over 50,000 Stripe API keys exposed, highlighting fraud risks
Meet the Huntress MCP Server
Strengthening Security of AI Coding: Prisma AIRS API Integration with OpenAI Codex
Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
Gateway API v1.6: TCPRoute and UDPRoute Graduate to Standard
Introducing the Billable Usage API: programmatic cost visibility for Cloudflare
Traefik Labs introduces Distro Zero secure runtime for API and AI gateways
Vatican’s Click To Pray app exposed personal data from 700,000 users
Service-to-Service Authentication: Patterns for Securing API and Microservices
VU#762226: Plane contains multi-tenant authorization bypass vulnerability
Trump selur aðgengi að færslum sínum á Truth Social
Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Cequence Platform 9.0 uses AI to simplify API security and compliance
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
Unlocking the Cloudflare app ecosystem with OAuth for all
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
New 42Crunch plugin helps developers find and fix API vulnerabilities in GitHub Copilot
Fifteen JetBrains Marketplace Plugins Found Stealing API Keys
Security researcher reportedly accesses FIFA World Cup broadcast controls via API flaw
Major AI Clients Shipping With Broken OAuth Implementations (JUNE 2026 UPDATE)
ServiceNow fixes API issue after reports of suspicious tenant activity
Improper access control in API endpoints
Why AI Agents Need an Identity Model, Not Just an API Key
Claude Code has an MCP security problem — and your developers are already using it
From API key to live threat detections in minutes: how Elastic Security ingests Google Threat Intelligence
AI security’s cost bottleneck isn’t tokens – it’s validation
Zapier security flaws could have exposed millions of user accounts
Anthropic adds 28 security and compliance integrations for Claude
Why 75% face API ATTACKS
Threat hunters find Google API keys still usable 23 minutes after deletion
Automating identity lifecycle and security with AWS Directory Service APIs
Cisco Secure Workload Unauthorized API Access Vulnerability
Kubernetes v1.36: Mixed Version Proxy Graduates to Beta
New GhostLock tool abuses Windows API to block file access
MyAudi app:Security issues in Audi Connected Vehicle experience
AI Firm Braintrust Prompts API Key Rotation After Data Breach
Lightning Talk: AI as the Attack: Weaponizing APIs
Major AI Clients Shipping With Broken OAuth Implementations
Command Zero releases APIs to enable programmatic security investigations
Gateway API v1.5: Moving features to Stable
iDenfy launches MCP server for AI coding assistants
Command integrity breaks in the LLM routing layer
Register domains wherever you build: Cloudflare Registrar API now in beta
Two Admin-level API keys publicly exposed for years, both dismissed as "Out of scope" by official bug bounty programs. Case analysis + proposed NHI Exposure Severity Index
Cleartext Credentials in response for API endpoints
OS Command Injection through API endpoint
SQL Injection via API
Vulnérabilité dans Foxit PDF Services API (13 avril 2026)
Google API Keys Quietly Gain Access to Gemini on Android Devices
How Mimecast brings enterprise-grade email protection to API deployment
Security boffins scoured the web and found hundreds of valid API keys
Cisco IOS XE Software Lobby Ambassador Privilege Escalation Vulnerability
Google limits Android accessibility API to curb malware abuse
1Password Users API for Partners helps automate identity response during incidents
Average Number of Daily API Attacks Up 113% Annually
Traefik Triple Gate gains parallel safety pipelines, failover routing, and AI runtime controls
JSOC IT’s AUTOPSY platform puts security stacks under live API verification
We audited authorization in 30 AI agent frameworks — 93% rely on unscoped API keys
Mimecast brings gateway-grade email security to API deployment
Active defense: introducing a stateful vulnerability scanner for APIs
A Deep Dive into the GetProcessHandleFromHwnd API
thousands of Google API keys exposed
Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration
Code Mode: give agents an entire API in 1,000 tokens
Blue Team | Hunting Cloud Persistence Without Malware
API Threats Grow in Scale as AI Expands the Blast Radius
Hacking a pharmacy to get free prescription drugs and more
Spotlight on SIG Architecture: API Governance
Kong launches Context Mesh to turn enterprise APIs into agent-ready tools
trappsec: open source framework for API deception
280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII
Scanning for exposed Anthropic Models, (Mon, Feb 2nd)
Using MCP Servers: From Quick Tools to Multi-Agent Systems