api-security
47 articles with this tag
HIGH
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
MEDIUM
MEDIUM
HIGH
CRITICAL
LOW
HIGH
MEDIUM
INFO
INFO
HIGH
HIGH
CRITICAL
CRITICAL
CRITICAL
MEDIUM
HIGH
MEDIUM
HIGH
HIGH
INFO
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
INFO
MEDIUM
MEDIUM
HIGH
MEDIUM
HIGH
CRITICAL
MEDIUM
HIGH
HIGH
CRITICAL
HIGH
HIGH
INFO
INFO
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
Attacker stole a METR API key, used $600K worth of credits, and no one noticed for weeks
AI Model Evaluator METR Hit by Credential Theft, Probing
Attackers Steal METR API Key and Burn $600,000 in AI Credits
One Resident Login, an Entire Apartment Complex: The Master PIN in Rently's API (CVE-2026-75960)
[NEU] [mittel] LiteLLM: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
NCSC-2026-0297 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab Enterprise Edition en Community Edition
Token Jacking: Cybercriminals Could Be Stealing Your AI Resources
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Microsoft shortens NuGet API key lifetime to improve supply chain security
VU#790363: foreUP golf management platform's web API contains multiple vulnerabilities
Multiple Chinese civic apps share one reward/lottery backend whose signing secret is recoverable
Why Cloud Detection Fails When Teams Cannot Reconstruct Control-Plane Activity
Is Your AppSec Program Built to Close the OWASP Top 10 2025 Coverage Gap?
Rockwell Automation FactoryTalk Analytics PavilionX
Hacking Google with A.I. for $500,000
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
CoreEvent GraphQL API – BOLA/IDOR exposing 10k+ records (PII, ticket QR codes) via unauthenticated queries
Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access
Deleted Google API keys remain active for up to 23 minutes, study finds
PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure
Amazon Quick authorization bypass let users reach blocked AI chat agents
What OpenClaw revealed about the agent security model
NCSC-2026-0137 [1.00] [M/H] Kwetsbaarheden verholpen in LiteLLM door BerriAI
Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking
We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is
Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw
Toxic Combinations: When Cross-App Permissions Stack into Risk
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
Critical Vulnerability in OpenAI Codex Allowed GitHub Token Compromise
OpenAI Codex: How a Branch Name Stole GitHub Tokens
APIs are the new perimeter: Here’s how CISOs are securing them
Lloyds Bank reveals how IT bug exposed transaction data
Ajax data breach exposed season tickets, supporter bans open to tampering
Your APIs are under siege, and attackers are just getting warmed up
AI, APIs and DDoS Collide in New Era of Coordinated Cyberattacks
I Found 39 Algolia Admin Keys Exposed Across Open Source Documentation Sites
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool
Credential Protection for AI Agents: The Phantom Token Pattern
Dev stunned by $82K Gemini bill after unknown API key thief goes to town
Iran's cyberwar has begun
Thousands of Public Google Cloud API Keys Exposed with Gemini Access After API Enablement
‘Silent’ Google API key change exposed Gemini AI data
Public Google API keys can be used to expose Gemini AI data
Cybersecurity in cross-border logistics operations
Battling bots face off in cybersecurity arena