Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectiv…
After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey,Â73% of enterprises reported that they already publish more th…
After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey,Â73% of enterprises reported that they already publish more th…
slapi-nis: NULL dereference (DoS) with specially crafted Binding DN (CVE-2021-3480) For more details about the security issue(s), including the impact, a CVSS …
An update that solves three vulnerabilities and has one errata is now available.
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security fi…
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, inclu…
Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure.The flaws, disc…
Organizations are losing between $94 - $186 billion annually to vulnerable or insecure APIs (Application Programming Interfaces) and automated abuse by bots. T…
Reportedly, criminal hackers exploited an unsecured Authy (an MFA app) API to verify phone numbers…Unsecured Authy MFA API Exploited For Malicious Phone Number…
Researchers have devised a new attack strategy, called “Terrapin,” that exploits vulnerabilities in the SSH…New Terrapin Attack Demonstrates SSH Vulnerabilitie…
Researchers caught Trafficstealer actively abusing Docker Container APIs to redirect users to malicious websites. The…Trafficstealer Exploits Container APIs fo…
Three new security flaws have been disclosed in Microsoft Azure API Management service that could be abused by malicious actors to gain access to sensitive inf…
Valve has recently addressed a serious API vulnerability that could allow an adversary to add…Steam Wallet API Vulnerability Discovered - Allowed For Addition …
Popular online learning platform Coursera addressed a serious API vulnerability affecting potential students. Exploiting this…Coursera API Vulnerability Could …
GitLab has addressed a security vulnerability that could have exposed private groups. The flaw existed in the Elasticsearch API thatGitLab Fixed Elasticsearch …
A vulnerability was found in the EC2 credentials API of Keystone, the OpenStack identity service: Any user authenticated within a limited scope (trust/oauth/ap…
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization's SD-WAN ne…
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclos…
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclos…
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coord…
Apache’s release notice on Oct 3, 2026 lists six Apache Directory LDAP API vulnerabilities.
Apache detailed two Apache APISIX vulnerabilities in notices issued on October 1, 2026.
Debian released an advisory for vulnerabilities in Neutron, the OpenStack virtual network service, urging users to upgrade to version 2:26.0.3-0+deb13u3 for be…
