SecuritySalesforce and ServiceNow attacks expose new API risks
Researchers say ‘City-Forum’ campaign targets Salesforce and ServiceNow, possibly tied to ShinyHunters.
> Search
4 results for “api-security”
Security
SecurityCritical Spikster API Flaw Exposes Servers
A missing authentication vulnerability in Spikster allows unauthenticated attackers to remotely access API routes and perform administrative actions.
SecurityClawvet API Secret Flaw Risks User Data
A hard-coded JWT secret in self-hosted Clawvet API versions prior to 0.7.5 allows unauthenticated access to sensitive user information.
Cyber CrimeDormant Accounts Fuel Stealthy GitHub Reconnaissance Campaigns
Threat actors are weaponizing years-old accounts to map organizational structures and probe sensitive repositories via the GitHub API.