Over 40K Attacks Exploit APIs to Smuggle Malicious Code
The first half of 2025 has marked a sharp escalation in API-focused threats, according to a new data-driven briefing from Imperva Threat Research.
Drawing...
New Release of Empire Brings Agent Upgrades, API Integration
The Empire framework continues to set the standard for post-exploitation and adversary emulation, offering Red Teams and penetration testers a versatile, modular platform built...
Critical Azure API Connection Vulnerability Exposes Cross-Tenant Compromise
A critical vulnerability in Microsoft Azure's API Connection architecture that enabled complete cross-tenant compromise of cloud resources worldwide.
The bug, which Microsoft patched within...
Insomnia API Client Flaw Allows Arbitrary Code Execution Through Template Injection
A critical security vulnerability has been uncovered in the Insomnia API Client, developed by Kong, that allows for arbitrary code execution through template injection,...
Chrome Extensions Vulnerability Leaks API Keys, Secrets, and Tokens
A new wave of security concerns has emerged within the Chrome Web Store after researchers uncovered widespread leakage of API keys, secrets, and tokens...