Byoky open-source wallet stores AI API keys securely
Byoky lets users store and control OpenAI Anthropic and other API keys in a local encrypted wallet.
Stories per day · 30 days
2 RSS
Relatedadaptive-attacks1ai-key-management1akamai1anthropic1application-security1bot-management1byoky1cert-in1ddos1gpt-51imperva1machine-speed1model-distillation1openai1open-source1reasoning-traces1runtime-detection1waap1
24 stories, newest first · one card per story
Stories tagged #api-security
Imperva scores 100% in SecureIQLab Cloud WAAP v5.0 test
The August 2026 AMTSO-certified test ran 12 platforms through 1,608 attacks; scores fell to about 61%.
Essay says runtime API controls must track adaptive attacks
It cites Anthropic’s review of 832 banned accounts and says only 19% of organizations keep a continuous API inventory.
Akamai post frames CERT-In lessons on API attacks
The available text only lists section headings and does not describe either advisory or any affected product.
1
Researchers extract hidden GPT-5.6 reasoning through an OpenAI API flaw
OpenAI confirmed the bug, paid Xint a $6,000 bounty, and deployed an undisclosed fix on October 23.
Akamai Named a Leader in IDC MarketScape: Worldwide Web Application and API Protection Platforms 2026 Vendor Assessment
IDC MarketScape names Akamai a Leader among 2026 worldwide web application and API protection vendors.
11 Best API Security Tools Compared (2026): Features & Pricing
A 2026 roundup compares 11 API security tools, with Salt Security and Traceable rated highest.
8
Open Enrollment Is Where Digital Strategy Gets Tested. Are You Ready?
Akamai offers six preparation tips for health plans to harden payer infrastructure, APIs, and member experience ahead of open enrollment.
Top 10 Best API Security Tools in 2026 [Ranked & Scored]
Salt Security tops a 2026 API security ranking, ahead of Traceable and Akamai’s Noname.
9
Why API Security Belongs in ECB Cyber Action Plans
Akamai says banks should secure shadow and zombie APIs to meet ECB cyber action-plan mandates.
Postman adds security controls for AI agents, APIs, and MCP servers
Postman launched Fabric Gateway to govern how AI agents and LLMs discover and call APIs and MCP servers.
3
Enforce positive security with Cloudflare Application Profiles
Cloudflare launches Application Profiles, learning expected HTTP request structures to enforce positive security and block non-conforming requests.
1
Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities
Akamai joined Chainguard's Athena Coalition to automatically shield App and API Protector customers from new vulnerabilities.
AI Drives Surge in Bot and API Threats
Akamai says AI drove a 300% rise in bot traffic and a 113% increase in daily API attacks.
2
Siemba brings continuous IDOR testing to production APIs
Siemba released automated IDOR/BOLA testing for REST, GraphQL and SOAP APIs, checking a 200-endpoint collection in under an hour.
2
CenterPoint Energy confirms data breach following claims on hacking forum
CenterPoint Energy confirmed a breach after a hacker claimed stealing 7.49 million customer records via an unauthenticated API lacking WAF, rate limiting, and token checks.
1
Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
Attackers are actively exploiting CVE-2026-5430 (CVSS 10), a WSO2 JWT authentication bypass, to access enterprise API credentials and sensitive data.
4
Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen
CenterPoint Energy confirmed a breach after a hacker claimed stealing 7.49 million customer records, including partial Social Security numbers, via an unprotected API.
1
Postman Passport controls API access without exposing credentials
Postman launches Passport, a secretless API access product keeping real credentials inside customer environments for humans and AI agents.
3
Streamlining Application and API Discovery and Governance
Akamai outlines an approach to streamlining application and API discovery and governance to reduce application and API risk.
From all-or-nothing to task-based OAuth consent
Cloudflare OAuth adds optional scopes and task-based consent, letting users limit what apps can access per task.
AI Tool Identifies BOLA Vulnerabilities in Easy!Appointments
Unit 42's AI-powered tool found 15 BOLA vulnerabilities in Easy!Appointments, rated up to CVSS 9.9, letting low-privileged users escalate privileges; fixed in 1.5.0.
1
Harnessing LLMs for Automating BOLA Detection
Unit 42's BOLABuster methodology uses LLMs to automate detection of broken object-level authorization vulnerabilities, uncovering flaws in Grafana, Harbor, and Easy!Appointments.
1
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning
Researchers show encrypted reasoning blocks in OpenAI, Anthropic, and Google APIs can be replayed to recover hidden reasoning and secrets like API keys.
2