Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The emergence of smart mobility services and applications has led to a sharp increase in the use of APIs in the automotive industry. However, this increased re…
APIs, APIs Everywhere! Numerous (and by that, I mean all of them) mobile and cloud-native…Why you still need security alongside your API Gateway on Latest Hack…
API-oriented cyberattacks have wreaked havoc on the corporate world, making every organization concerned about API…Why Traditional AppSec Tools are Ineffective…
After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey,Â73% of enterprises reported that they already publish more th…
After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey,Â73% of enterprises reported that they already publish more th…
slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480) For more details about the security issue(s), including the impact, a CVSS …
An update that solves three vulnerabilities and has one errata is now available.
An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement o…
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security fi…
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on Oc…
The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspo…
Cybersecurity researchers have disclosed details of a new fully-featured Windows backdoor called NANOREMOTE that uses the Google Drive API for command-and-cont…
Cybersecurity researchers have discovered a variant of a recently disclosed campaign that abuses the TOR network for cryptojacking attacks targeting exposed Do…
Reportedly, Anthropic has restricted OpenAI from accessing the Claude API after noticing an apparent breach…Anthropic Restrict Claude API Access To OpenAI Engi…
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, inclu…
Let's dive into the latest leap for Linux security: hardware-wrapped inline encryption keys. You might have heard about this feature making its way into the ma…
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using C…
Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure.The flaws, disc…
The lines between digital and physical realms increasingly blur. While this opens countless opportunities for businesses, it also brings numerous challenges. I…
The administrators of the Python Package Index (PyPI) repository have quarantined the package "aiocpa" following a new update that included malicious code to e…
Organizations are losing between $94 - $186 billion annually to vulnerable or insecure APIs (Application Programming Interfaces) and automated abuse by bots. T…
With the latest update, Google allows users to sync their Passkeys using the Google Password…Google Launches Passkeys Sync With Google Password Manager on Late…
Web scraping is a technique organizations and researchers use to extract useful information from the web. However, this method poses various ethical and techni…
Reportedly, criminal hackers exploited an unsecured Authy (an MFA app) API to verify phone numbers…Unsecured Authy MFA API Exploited For Malicious Phone Number…
