Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New research has found that Google Cloud API keys, typically designated as project identifiers for billing purposes, could be abused to authenticate to sensiti…
Cybersecurity researchers have disclosed details of a malicious Google Chrome extension that's capable of stealing API keys associated with MEXC, a centralized…
While API security is increasingly being exposed to cyber threats, Cloudflare has come up with a solution. Recently, Cloudflare hasCloudflare Launch Free API S…
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to …
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security brea…
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, S…
JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of i…
A new "comprehensive toolset" calledAlienFoxis being distributed on Telegram as a way for threat actors to harvest credentials from API keys and secrets from p…
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCo…
Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capab…
Cybersecurity researchers have disclosed details of a new malicious package discovered on the NuGet Gallery, impersonating a library from financial services fi…
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
Believe it or not, your attack surface is expanding faster than you realize. How? APIs, of course! More formally known as application programming interfaces, A…
API attacks are on the rise. One of their major targets is eCommerce firms like yours.APIs are a vital part of how eCommerce businesses are accelerating their …
The project behind the Rust programming language has revoked all API keys from its crates.io package web app. These API keys were not randomly generated and we…
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. …
Go 1.27.3 and Go 1.26.10, released on October 20, make Go's certificate verifier reject any certificate chain that passes through one of eight intermediate cer…
Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 ma…
Social media platform X is urging users who have enrolled for two-factor authentication (2FA) using passkeys and hardware security keys like Yubikeys to re-enr…
IntroductionIn today's interconnected digital ecosystem, Application Programming Interfaces (APIs) play a pivotal role in enabling seamless communication and d…
Application Programming Interfaces (APIs) have become the backbone of modern software development. APIs enable seamless…Ease of Use and Security: Two key aspec…
APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectiv…
An unknown threat actor has been observed leveraging a malicious Windows kernel driver in attacks likely targeting the Middle East since at least May 2020.Fort…
The emergence of smart mobility services and applications has led to a sharp increase in the use of APIs in the automotive industry. However, this increased re…
