Security Info Watch

The Hidden Identity Threat Lurking Behind APIs and Automation

Machine identities now outnumber human users across most enterprises, yet many remain unmanaged, overprivileged, and ...

Data Theorem Launches the Industry's First Closed-Loop AI Security Platform

Data Theorem, Inc., a leading provider of modern application security, today announced three new AI security capabilities: AI Exploits, AI Auto-Remediation, and AI Active Protection, all without the ...
SDxCentral

AI, Machine Learning Are the New Battleground for API Exploits, According to New Wallarm Report

Findings uncover rapid acceleration in API vulnerabilities in new AI-related dev and infrastructure products like NVIDIA’s Triton Inference Server, and API incidents that impact major brands like ...
The Next Web

Hackers are mass-exploiting a Gravity SMTP flaw to steal API keys from 100,000 WordPress sites

Wordfence blocked 17M+ attempts to exploit a Gravity SMTP bug that leaks API keys and system data from WordPress sites without authentication. Attackers are actively exploiting a vulnerability in the ...
Financial Post

Vulnerable APIs and Bot Attacks Costing Businesses up to $186 Billion Annually

API insecurity and automated abuse by bots responsible for up to 11.8% of cyber events and losses globally Bot-related security incident count rose 88% in 2022 and 28% in 2023 Insecure APIs result in ...
CSOonline

APIs are the new perimeter: Here’s how CISOs are securing them

Today’s attack surface is shifting from the endpoint to the API, and AI and third-party SaaS are worsening the issue. CISOs offer advice for API defense. Recent breaches suggest attackers are shifting ...
Ars Technica

Google publishes exploit code threatening millions of Chromium users

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other ...