APIs

APIs | News, how-tos, features, reviews, and videos

Stolen AI credentials feed growing LLM proxy economy

More than 80,000 proxy servers have been observed cloaking the origin of traffic to frontier models, likely using AI credentials harvested via information stealers, phishing campaigns, and supply-chain attacks.

By Lucian Constantin

Sep 28, 20266 mins

APIsAccess ControlCybercrime

AI agent authorization risks remain a gap in new NIST-CISA token security guidance

By Prasanth Aby Thomas

Sep 16, 20265 mins

APIsAccess ControlSingle Sign-on

FastAPI-based AI tools exposed to authentication bypass by flaw in Starlette framework

By Gyana Swain

May 27, 20265 mins

APIsArtificial IntelligenceVulnerabilities

APIs are the new perimeter: Here’s how CISOs are securing them

By Bill Doerrfeld

Mar 30, 202614 mins

APIsApplication SecurityIdentity and Access Management

‘Silent’ Google API key change exposed Gemini AI data

By John E. Dunn

Feb 27, 20264 mins

APIsAccess ControlAuthentication

Battling bots face off in cybersecurity arena

By Maxwell Cooter

Feb 13, 20262 mins

APIsCloud SecurityZero-Day Vulnerabilities

Articles

Critical vulnerability in IBM API Connect could allow authentication bypass

Rated 9.8 out of 10 in severity, the flaw could allow a remote attacker to gain unauthorized access to applications.

By Lynn Greiner

Dec 31, 2025 5 mins

APIsApplication SecurityDevelopment Tools

WhatsApp API worked exactly as promised, and stole everything

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence.

By Shweta Sharma

Dec 23, 2025 4 mins

APIsSecuritySoftware Development

OpenAI admits data breach after analytics partner hit by phishing attack

Mixpanel warns of phishing attacks after criminals steal email addresses and organization IDs from some customer profiles.

By John E. Dunn

Nov 27, 2025 5 mins

APIsCyberattacksData Breach

Rethinking identity for the AI era: CISOs must build trust at machine speed

Human-centered identity systems were never designed for the coming wave of autonomous AI agents. CISOs face a reckoning over how to rebuild identity systems to counter the risks.

By Cynthia Brumfield

Nov 18, 2025 10 mins

APIsArtificial IntelligenceIdentity and Access Management

AI startups leak sensitive credentials on GitHub, exposing models and training data

Experts say the leaks highlight how fast-growing AI firms may be prioritizing innovation over basic DevSecOps hygiene, leaving valuable intellectual property and data at risk.

By Prasanth Aby Thomas

Nov 11, 2025 4 mins

APIsArtificial IntelligenceSecurity

New backdoor ‘SesameOp’ abuses OpenAI Assistants API for stealthy C2 operations

Microsoft uncovers a months-long campaign where threat actors used OpenAI’s legitimate API as a covert command-and-control channel, bypassing traditional detection methods.

By Shweta Sharma

Nov 4, 2025 3 mins

APIsSecurityVulnerabilities

4 factors creating bottlenecks for enterprise GenAI adoption

Most GenAI pilots flop, but with better security, oversight and smart integration, enterprises can finally turn experiments into real impact.

By Virendra Singh Panwar

Oct 22, 2025 10 mins

APIsGenerative AIPrivacy

Salesforce’s glaring Dreamforce omission: Vital security lessons from Salesloft Drift

Salesforce failed to address the massive wave of OAuth breaches at its Dreamforce conference, but securing third-party authentication is paramount for the agentic future it seeks.

By Maria Korolov

Oct 22, 2025 10 mins

Access ControlAuthenticationData Breach

Brute force attacks hitting SonicWall firewall configuration backups

Configs were stored in customers’ cloud portals; admins warned to change passwords, keys, and secrets.

By Howard Solomon

Sep 17, 2025 5 mins

APIsCyberattacksNetwork Security

Docker malware breaks in through exposed APIs, then changes the locks

The new variant of Docker-targeting malware skips cryptomining in favor of persistence, backdoors, and even blocking rivals from accessing exposed APIs.

By Shweta Sharma

Sep 11, 2025 3 mins

APIsMalwareSecurity