Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion ...

Proposed "Open Revocable Key Standard" was formed around that concept that credentials should come with self-destruct built ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a ...

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing ...

Magento zero-day vulnerability CVE-2026-75650 exploited a fully patched store for three days before Adobe released APSB26-146 on September 7. A self-updating Rust backdoor survived the patch, evaded ...

AI agents helped attackers launch a cloud credential theft campaign in under six hours, stealing thousands of third-party ...

Who needs a crypto exchange API and what can you make of it? Here are five best crypto exchange APIs for 2026.

Critical ArangoDB flaws let attackers bypass authentication, access data, and gain root-level code execution on vulnerable hosts.

Google documented its Web Search Service API, which returns Google Search results as JSON. Access requires a Google Cloud ...

This week’s cyber threats span phishing abuse, malicious extensions, exposed systems, old flaws, AI attacks, and supply-chain ...

Chrome zero-day attacks, router hijacks, Coder’s supply chain breach, image-free QR phishing, and more security news.