BdThemes supply chain attack poisoned JSON API exploiting XSS vulnerability to create rogue WordPress admin accounts and install webshells.

IntroductionIn July 2026, Zscaler ThreatLabz identified a new Rust-based malware family that we track as C2Looper, which is ...

Compare the top crypto wallet APIs of 2026, from CoinStats to Allium, DeBank, and Moralis, ranked on chain coverage, data ...

Cloudflare has introduced a wallet system that allows AI agents to pay for API usage. The system is based on the x402 project ...

Broken object level authorisation, usually shortened to BOLA, is one of the most common API security issues because it sits in the gap between application logic and access control. In simple terms, ...

Anthropic is retiring the legacy Claude API Workbench today, August 17, 2026, closing the export window for saved prompt data and breaking any automated pipeline still calling three experimental ...

DeepSeek V4 Pro 0813 reached general availability on August 12, 2026, with vendor-reported benchmark gains of up to 49.9 ...

Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit ...

Legacy core banking systems were built to run forever — and they do. The problem isn't reliability. It's that a system ...

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the ...

A new variant of the Shai-Hulud npm worm has poisoned hundreds of packages while adding propagation techniques that can leave ...

Autonomous AI cyberattack on Taiwan's government breached a nuclear safety agency and 7 energy firms using only free downloads: hackers bypassed AI frameworks' own safety guardrails by calling the ...