API

Every day, thousands of web applications and APIs are probed, scanned, and exploited by attackers who have learned a critical truth: most organizations are not seeing a fraction of what is actually happening inside their environments.  Firewalls, intrusion detection systems,...

API monitoring tools play a crucial role in maintaining the performance, availability, and reliability of application programming interfaces that link diverse software systems. They continuously track and analyze API requests and responses to detect latency, errors, and service interruptions....

A critical memory corruption vulnerability in vLLM versions 0.10.2 and later allows attackers to achieve remote code execution through the Completions API endpoint by sending maliciously crafted prompt embeddings. The vulnerability resides in the tensor deserialization process within vLLM's entrypoints/renderer.py...

Summary 1. CoinMarketCap discovered a security flaw on June 20, 2025, in a homepage doodle image that executed malicious code through API calls, causing unwanted pop-ups for users. 2. The breach involved a stored XSS attack where the compromised image triggered unauthorized...

Google Cloud experienced one of its most significant outages in recent history on June 12, 2025, when a critical failure in its API management system brought down dozens of services worldwide for up to seven hours.  The incident affected millions...

A new open-source automated red teaming engine designed to democratize advanced security testing across AI systems, Kubernetes environments, and APIs.  The tool addresses the growing complexity of security vulnerabilities as organizations increasingly adopt cloud-native applications and artificial intelligence technologies. Woodpecker already...

APIs are the new highways of the internet. They’re fast, powerful, and make everything run until someone sneaks in and crashes the system. That’s the dilemma of the modern digital world: we’ve built an economy around APIs, but a...

Critical security flaws have been uncovered in Ivanti Endpoint Manager Mobile (EPMM), a widely used mobile device management (MDM) solution, exposing organizations to the risk of unauthenticated remote code execution (RCE). The vulnerabilities, tracked as CVE-2025-4427 and CVE-2025-4428, have...

The UK government has unveiled plans to roll out passkey technology across its digital services as it seeks to reduce the risk of cyber-attacks to people's GOV.UK accounts.  Announced during the CYBERUK 2025 conference in Manchester, this initiative aims to...

Frida 16.7.0, the latest version of the popular dynamic instrumentation toolkit, has powerful new APIs specifically designed for advanced threat monitoring and security analysis.  This major update, announced on March 13, 2025, introduces groundbreaking capabilities that significantly enhance the toolkit's...