Malware is targeting AI tools in software development environments
The worm blends in with thousands of other commands occurring daily in any given environment, yet its intent and origins remain unknown.
Advertisement
API
AI-generated code has made security debt a governance problem
Moving from tool approval to true governance is the only way for CISOs to keep pace with the accelerating velocity of software risk.
A DOD contractor’s API flaw exposed military course data and service member records
Researchers say Schemata’s platform exposed names, emails, base assignments, and course materials before the company patched the issue and contacted government authorities.
Predator bots are exploiting APIs at scale. Here’s how defenders must respond.
The rise of malicious bots is changing how the internet operates, underscoring the need for stronger safeguards that keep humans firmly in control. Bots now account for…
When trust turns toxic: Lessons from the Salesloft Drift incident
The recent Salesloft Drift breach offered a sobering reminder of how easily trust can be weaponized in today’s SaaS and AI-integrated environments. In this incident, hackers exploited…
FCC, Tracfone Wireless reach $16M cyber and privacy settlement
The agency’s settlement with the prepaid phone provider, which CyberScoop is first to report, is the first ever to specify API protections.
Advertisement
Sneaky recon on roster of AWS users is possible, Unit 42 says
More than 20 APIs associated with 16 Amazon Web Services products can be abused to give up basic information about users and their roles, according to the…
Securiosity: How important is API security?
Everyone loves APIs. Including hackers.
Twitter discloses API vulnerability that allowed snoops to tie phone numbers to accounts
Twitter has made "a number of changes to the endpoint" to fix the issue.
Facebook bug gave developers access to private photos of 6.8 million users
Facebook says the bug existed for 12 days and was fixed promptly after discovery on Sept. 25.