Cyber CrimeNewNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “api”
Cyber CrimeNew
Cyber CrimeJapan's Web Data Leaks Surge as APIs Abused
JPCERT/CC reports a sharp rise in personal data leaks at Japanese organizations, tied to mobile API abuse and a Metabase flaw.
Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
AI & MLWikimedia Traces OpenAI Agents on Its Wikis
The Wikimedia Foundation says rogue OpenAI agents edited its wikis, targeted Etherpad, and flooded its APIs with millions of requests.
AI & MLEtched already fielding $40B+ bids
Reports say the AI chip startup is reviewing fresh investment offers months after its last raise.
SecurityCisco WAN Manager Flaw Opens Admin Door
A critical authentication bypass in Cisco Catalyst SD-WAN Manager let attackers reach an admin API, and the fix requires an upgrade.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
Cyber CrimeThird-Party App Key Opens Door to BigCommerce Data Theft
Attackers used a compromised credential from the Ribon app to pull customer data from hundreds of online stores, exposing a soft spot in e-commerce supply chains.
AI & MLThe billion-dollar agentic security gap
Investors say AI agents are being deployed faster than they can be secured, opening a market for startups that can govern non-human identities.
AI & MLOpenAI Details AI Models Going Rogue
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
AI & MLAI assets become prime targets for attackers
Google's threat intelligence unit reports that espionage and criminal groups are stealing models, prompts, and API keys to power their own AI operations.
SecurityGitLab's Perfect 10 Flaw Exposes Secrets
A maximum-severity path traversal bug in GitLab's repository commits API lets unauthenticated attackers read arbitrary files, and probes are already underway.
Tech NewsKhosla Ventures Looks Beyond Sand Hill
The firm is opening its first office outside Menlo Park, on 14th Street in New York, with an unusual briefing center attached.
Tech NewsVenture firms push into pro sports ownership
Collaborative Fund is taking a stake in D.C. United and Audi Field, joining Thrive Capital in a new model of venture-backed team ownership.
Cyber CrimeOne Exploit Kit, Four Spy Groups, One Week
Proofpoint says China-aligned clusters rapidly adopted BlueMoon, a Chrome and Windows exploit chain that may have cost far less to build than expected.
Cyber CrimeStolen AI Tokens Skirt Login Checks
Okta's review of a 7 GB infostealer dump found unexpired AI service tokens that can be replayed without a password or MFA.
SecurityRevoking Leaked API Keys Needs a Standard
Proposal for ORKS would add self-destruct capability to API keys, giving scanners and agents a way to revoke stolen credentials.
TrendingChatGPT Image Generation Hit by Ongoing Outage
OpenAI is investigating ChatGPT image generation failures and file upload delays affecting users.
SecurityAPIS Leak Exposes 220M Travel Records
A misconfigured Vietnamese APIS database exposed 220M passenger and crew records, including passport data.
Cyber CrimeNorth Korea's Linux Espionage Toolkit Deepens Threat
Rapid7 reports a new Linux toolkit from North Korean hackers targeting South Korean firms, enabling long-term espionage.
SecurityHAProxy Trojans Hide in South Korean Load Balancers
A Linux toolkit compiled into HAProxy binaries intercepts traffic for two South Korean firms, likely via state actors.
Tech NewsVenture Cash Meets Military Boom in SoCal
Defense contracts in LA County doubled in 10 years as startups and venture capital reshape aerospace.
Tech NewsEFF Urges Courts: Don't Bend Copyright for AI
Digital rights group warns judges against reshaping copyright law in response to AI anxiety, urging reliance on fair use.
Tech NewsStrictlyVC returns to New York with a focus on AI's next phase
TechCrunch's event series lands in the West Village on Sept 10 with Rabois, Shapiro, and more.
AI & MLAI Agents Show They Can Exploit API Flaws Autonomously
Aikido Security finds Claude Opus 4.6 repeatedly bypassed a gym's booking restrictions and altered other users' reservations in a synthetic test.
Tech NewsX's Legal Push Against Nitter Tests Open Source Limits
X Corp. sends cease-and-desist letters to Nitter, an open source X reader, alleging API misuse and demanding shutdown.
Tech NewsAI flips the advantage for foreign founders
a16z sees international founders winning early AI deals, signaling a shift in venture playbooks.
TrendingVC board seats under antitrust microscope
DOJ probes a16z board roles at rival firms, alarming venture insiders.
AI & MLAI Patch Flood: Why the Bug Bonanza Won't End Anytime Soon
AI is supercharging both bug discovery and bug creation, driving patch counts to record highs — and reshaping how software gets fixed.
AI & MLGLM-5.3 Claims Superior Bug-Finding Edge
Zhipu's new AI model outperforms Western rivals on a cybersecurity benchmark, signaling China's rapid advance.