#api


Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Sep 16, 2026 // 11:41

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as […]

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

Sep 1, 2026 // 12:12

METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to […]

Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance

Aug 31, 2026 // 20:53

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints […]

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning

Aug 12, 2026 // 14:56

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets […]

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Aug 10, 2026 // 18:41

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet […]

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Aug 5, 2026 // 14:55

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive […]

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

Aug 5, 2026 // 13:38

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive […]

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Jul 2, 2026 // 16:06

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email […]

AI-Generated Browser Ransomware Abuses Chrome File System Access API on Android

Jul 1, 2026 // 16:07

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining “unrealistic browser-malware concepts with a real browser […]

282 iOS Apps Found Leaking LLM API Keys and Unauthenticated AI Proxy Access

Jun 30, 2026 // 16:56

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In […]

1 2 3 Next