Tag: API Security
Rented botnet drains victims’ AI credits with help from Grok
A new Windows botnet called x47.c uses xAI's Grok model to pick its next action and burns through victims' paid…
A Texas utility’s open API leaked 7.49 million customer records
CenterPoint Energy confirmed a breach after a hacker said a poorly defended API let him pull millions of customer lines…
Forged tokens breach a CVSS 10 flaw in WSO2’s API manager
Attackers are bypassing JWT authentication in WSO2 middleware that banks, telcos, and governments rely on to broker API traffic.
Decade Old Authentication Flaw in Python’s Core Infrastructure Patched
The flaw, discovered by DEVCORE researchers, could have redirected Python downloads to malicious servers but was patched within 48 hours…
AI-Powered Fuzzing Pipeline Uncovers $500,000 in Google Bugs
An AI-driven fuzzing pipeline uncovered over $500,000 in bug bounties from Google by exploiting access control failures across roughly 1,500…
Attack on Dashlane Reveals 2FA Weakness in Device Registration Process
Dashlane confirms attackers brute-forced 2FA tokens to download encrypted password vaults from fewer than 20 users, but encrypted data remains…
Annual Pentests Leave Banks Exposed for 345 Days: Real World Gap Revealed
A critical API flaw on a bank's third party mortgage portal exposed data for all institutions on the platform, revealing…
CERT-In Imposes 12 Hour Patching Window for Exposed Systems Due to AI Threats
CERT-In's new 12 hour patching mandate for internet facing systems aims to counter the rising threat of AI driven automated…