Search: “api security”

261 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 309 Vulnerability 261 Malware 83 Ransomware 72 Threat actor 62 Data breach 60 AI safety & security 28 Phishing & fraud 23 Advisory 9 Policy & legal 6 Industry 4 Research 3 Model release 1 Tools 1

SeverityAll critical 665 high 169 medium 78 low 0 info 11

How do I select an API security solution for my business?

Help Net SecurityFeb 17, 00:00 UTC · Feb 17, 2022Vulnerability in the wild

60

Week in review: 7 cybersecurity audiobooks to read, Patch Tuesday forecast

Help Net SecurityOct 9, 00:00 UTC · Oct 9, 2022Vulnerability in the wildCVE-2022-41040 CVE-2022-41082 CVE-2022-35256

60

Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication System

The Hacker NewsJan 1, 05:05 UTC · Jan 1, 2026Vulnerability in the wildCVE-2025-13915

60

Week in review: Zyxel firewalls vulnerability, phishing campaign targets ChatGPT users

Help Net SecurityMay 28, 00:00 UTC · May 28, 2023Vulnerability in the wildCVE-2023-2868 CVE-2023-287711

60

Week in review: Attackers use phishing emails to steal NTLM hashes, Patch Tuesday forecast

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2024Vulnerability in the wildCVE-2024-20337 CVE-2024-23225 CVE-2024-23296+6 CVEs

60

Cisco Patches CVSS 10.0 Secure Workload REST API Flaw Enabling Data Access

The Hacker NewsMay 22, 05:38 UTC · May 22, 2026Vulnerability in the wildCVE-2026-20223 CVE-2026-20182

60

Fortinet Patches Actively Exploited CVE-2026

The Hacker NewsApr 6, 17:04 UTC · Apr 6, 2026Vulnerability in the wildCVE-2026-35616 CVE-2026-21643

60

PraisonAI CVE-2026-44338 Auth Bypass Targeted Within Hours of Disclosure

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-44338

60

Week in review: CDK Global cyberattack, critical vCenter Server RCE fixed

Help Net SecurityJun 23, 00:00 UTC · Jun 23, 2024Vulnerability in the wildCVE-2024-0762 CVE-2024-37079 CVE-2024-37080

60

Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell)

Palo Alto Unit 42Jun 5, 17:51 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-41040 CVE-2022-41082 CVE-2021-34473+2 CVEs

60

'Eavesdropper' vulnerability strikes hundreds of mobile apps using Twilio

CyberScoopNov 9, 15:17 UTC · Nov 9, 2017Vulnerability in the wild

60

Cisco fixed maximum severity flaw CVE-2026

Security AffairsMay 21, 13:22 UTC · May 21, 2026Vulnerability in the wildCVE-2026-20223

60

Radware AI Xploit Shield delivers virtual patching for newly identified application and API flaws

Help Net SecurityJun 16, 00:00 UTC · Jun 16, 2026Vulnerability in the wild

57

Week in review: Microsoft fixes wormable RCE bug on Windows, check for CitrixBleed 2 exploitation

Help Net SecurityJul 13, 00:00 UTC · Jul 13, 2025Vulnerability in the wildCVE-2025-47981 CVE-2025-49719 CVE-2025-57771

60

Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday

Infosecurity MagazineJan 12, 09:36 UTC · Jan 12, 2022Vulnerability in the wildCVE-2022-21839 CVE-2022-21919 CVE-2022-21836+3 CVEs

60

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

60

Week in review: Follina exploit delivers Qbot malware, Patch Tuesday forecast, RSAC 2022

Help Net SecurityJun 12, 00:00 UTC · Jun 12, 2022Vulnerability in the wildCVE-2022-30190 CVE-2021-42321

60

IBM warns of critical API Connect bug enabling remote access

Security AffairsJan 2, 10:19 UTC · Jan 2, 2026Vulnerability in the wildCVE-2025-13915

60

Critical Apache HugeGraph Vulnerability Under Attack

The Hacker NewsJul 17, 05:25 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-27348

60

Week in review: Microsoft patches actively exploited 0-days, Amazon and HSBC employee data leaked

Help Net SecurityNov 17, 00:00 UTC · Nov 17, 2024Vulnerability in the wildCVE-2024-43451 CVE-2024-49039 CVE-2024-9463+1 CVEs1

60

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

The Hacker NewsMar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wild

60

Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecast

Help Net SecurityOct 6, 00:00 UTC · Oct 6, 2024Vulnerability in the wildCVE-2024-45519 CVE-2024-29824

60

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

Help Net SecurityMar 30, 10:17 UTC · Mar 30, 2026Vulnerability in the wildCVE-2025-53521

60

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Vulnerability in the wild

60

What is cybersecurity mesh architecture (CSMA)?

Help Net SecurityMay 11, 05:15 UTC · May 11, 2024Vulnerability in the wild

57

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

The Hacker NewsSep 24, 10:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-55241 CVE-2025-537861

60

Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability

The Hacker NewsAug 11, 05:31 UTC · Aug 11, 2021Vulnerability in the wildCVE-2021-36948 CVE-2021-36942 CVE-2021-36936+4 CVEs

60

The Future of Serverless Security in 2025: From Logs to Runtime Protection

The Hacker NewsNov 28, 11:30 UTC · Nov 28, 2024Vulnerability in the wild

60

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Vulnerability in the wildCVE-2022-26134 CVE-2020-148821

60

Cisco Issues Security Patch Updates for 32 Flaws in its Products

The Hacker NewsSep 6, 08:53 UTC · Sep 6, 2018Vulnerability in the wildCVE-2018-11776 CVE-2018-0435 CVE-2018-0423

60

Week in review: KeePass vulnerability, Apple fixes exploited WebKit 0-days

Help Net SecurityMay 21, 00:00 UTC · May 21, 2023Vulnerability in the wildCVE-2023-28204 CVE-2023-32373 CVE-2023-32409+1 CVEs

60

Google Discloses Poorly-Patched, Now Unpatched, Windows 0

The Hacker NewsDec 28, 06:17 UTC · Dec 28, 2020Vulnerability in the wildCVE-2020-0986 CVE-2020-17008

60

Lookout identifies exploitable vulnerabilities in mobile apps

Help Net SecurityJul 22, 00:00 UTC · Jul 22, 2026Vulnerability in the wild1

60

ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

The Hacker NewsFeb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild1

60

JetBrains Patches CVSS 9.8 TeamCity Flaw Allowing Server Takeover

Security AffairsJul 28, 11:17 UTC · Jul 28, 2026Vulnerability in the wildCVE-2026-63077

60

Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed

The Hacker NewsApr 7, 05:56 UTC · Apr 7, 2026Vulnerability in the wildCVE-2025-59528 CVE-2025-8943 CVE-2025-26319

60

WordPress Rushes Out Jetpack Patch to Millions

Infosecurity MagazineMay 31, 10:00 UTC · May 31, 2023Vulnerability in the wild

60

YesWeHack automates penetration testing with AI-powered agents

Help Net SecurityJun 25, 00:00 UTC · Jun 25, 2026Vulnerability in the wild

60

Week in review: Rackspace outage, Kali Linux 2022.4 released, Patch Tuesday forecast

Help Net SecurityDec 11, 00:00 UTC · Dec 11, 2022Vulnerability in the wildCVE-2022-4262

60

Over 250 attacks hit Adobe Commerce and Magento via critical CVE-2025

Security AffairsOct 23, 09:22 UTC · Oct 23, 2025Vulnerability in the wildCVE-2025-54236

60