RabbitMQ Flaws Expose OAuth Secrets and Cross-Tenant Queue Metadata
Cybersecurity researchers at Miggo have disclosed two access control vulnerabilities in the RabbitMQ message broker that could allow attackers to leak OAuth…
Tag: API Security
Dormant GitHub ‘Ghost’ Accounts Used in Coordinated Reconnaissance Campaigns
Datadog Security Labs has uncovered several overlapping campaigns that leverage dormant GitHub accounts—some created two to five years ago—to systematically enumerate corporate…
ToddyCat APT Deploys Umbrij Malware to Hijack Gmail via OAuth Token Theft
A new malware strain named Umbrij, attributed to the advanced persistent threat (APT) group ToddyCat, is abusing OAuth 2.0 tokens to gain…
Progress Kemp LoadMaster CVE-2026-8037 Under Active Exploitation
A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 (CVSS 9.6), is now facing active exploitation attempts.…
282 iOS AI Apps Leak API Keys and OpenAI Proxy Access in Network Traffic Study
Researchers at Wake Forest University tested 444 AI chatbot apps for iPhone and found that 282 of them (nearly two-thirds) exposed paid…
Wake Forest University: Academic Institution and Research Body
Researchers at Wake Forest University conducted the first in-depth study of API key leaks in iOS AI apps, using their tool LLMKeyLens.
Progress Kemp LoadMaster Pre-Auth Root Command Injection Flaw (CVE-2026-8037) Patched
A critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary…
Guardian Agents: Governing AI Identity in Enterprise Environments
AI agents are increasingly deployed in enterprise environments, inheriting permissions and executing tasks autonomously, often bypassing traditional identity governance controls. This article…
Top 10 Attack Surface Exposures in 2026: Databases, Admin Panels, and Legacy Services Dominate
According to a new analysis by Intruder, 60% of organizations have at least one HTTP panel exposed, 49% have a risky port…
Shadow AI’s Real Threat Is Access Control, Not Data Leakage
The cybersecurity landscape is shifting as Shadow AI evolves from a data leakage concern to a critical access control problem. According to…