Tag: api
-
AI Agent Discovery: API, Browser Identity Signals – Grip
Executive Summary AI agent discovery is the process of identifying individual AI agents and connecting them to evidence about their platform, owner, identity, permissions, and activity. Application APIs, browser telemetry, and identity signals reveal different parts of that picture. Reliable… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/11/ai-agent-discovery-api-browser-identity-signals-grip/
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s >>Don’t Ask Again<< Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories
A newly identified 2,539 distinct secrets across 1,994 public GitHub repositories, tracing exposure to coding-agent configuration files, Git history, and saved transcripts. Their November 5 research describes how Claude Code’s “Yes, and don’t ask again” approval can persist credential-bearing shell commands inside .claude/settings.local.json. Exposed material included production database passwords, cloud credentials, API tokens, and SSH…
-
Claude Code’s “Don’t Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them.When a user selects “Yes, and don’t ask again,” Anthropic’s AI coding assistant can save the command, word-for-word, including the secret, in a project settings file.Software security company Apiiro said yesterday…
-
Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse
Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen API access tokens. Shopify announced this requirement on November 5, 2026, and set enforcement deadlines right before merchants’ busiest shopping weeks, with restrictions starting on November 12 for applications using bulk operations. Developers must now specify which public IP addresses,…
-
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets/
-
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets/
-
OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run
OpenAI on Wednesday detailed a pipeline that employed an upcoming cyber-focused artificial intelligence (AI) model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2 million in API costs.”Our prototype identified and analyzed 2,308 candidate Linux kernel findings, dynamically reproduced 1,724 vulnerabilities, and produced 948 local privilege escalation (LPE) First seen on…
-
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services.The tactic is called LLMjacking, a form of resource hijacking adapted for the LLM era, where an attacker obtains an API key through phishing, source code leaks, misconfigured environments, or exposed…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Byoky: Open-source wallet for AI API keys
Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/byoky-open-source-ai-api-key-wallet/
-
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
A critical flaw in Canonical’s LXD and MicroCloud let an attacker log in as a trusted client without holding that client’s private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client’s public certificate.Once in, the attacker would act as that client, with access to…
-
New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs
Cisco Talos has uncovered NIK C2, a Go-based, 64-bit Windows remote access tool that embeds a working OpenAI client. Operators can send prompts through an infected machine and read the model’s replies in their C2 panel. NIK C2 malware According to technical research published by Cisco Talos, the implant talks to its server over TLS-secured…
-
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nik-c2-malware-victims-openai-keys/
-
Fehlende Rechteprüfung in der API – Fehler in OpenStack Manila lässt Fremde öffentliche Freigaben steuern
Tags: apiFirst seen on security-insider.de Jump to article: www.security-insider.de/openstack-manila-cve-2026-71195-public-shares-manipulieren-a-1ca34b7cb0ade9a7aae95686145b2a40/
-
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/even-after-php2shell-blast-radius-matters-more-than-a-cvss-score/
-
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/openai-compaction-flaw-ai/
-
Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique, named >>Compaction Smuggling,<< bypassed existing safeguards and could allow for the extraction of valuable training material from advanced models. According to Xint, OpenAI confirmed the issue, implemented an undisclosed fix on October 23, 2026, and…
-
GPT-6.1 Terra meets OpenAI’s Critical cyber threshold, and it’s cheaper than GPT-5.6 Terra
OpenAI released GPT-6.1 Terra, a model that operates desktop software, to all Plus, Pro, Enterprise, and Edu users in ChatGPT Work and Codex, and to developers through its API … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/gpt-6-1-terra-released/
-
ISMG Editors: Stolen Vendor API Secret Exposes Microsoft 365
ConnectWise Supply-Chain Hack, Rogue AI Agents and Rising AI Token Costs. In this week’s panel, four ISMG editors discussed the potentially far-reaching supply-chain attack involving ConnectWise, growing concerns over rogue AI agents, and Microsoft and Nvidia’s push to bring AI processing back onto company hardware as enterprises grapple with rising token costs. First seen on…
-
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22.The cause was the SDKs’ default client, which set no spending limit until releases on August 18 added one. The…
-
Microsoft shares how to fix broken Exchange Online EWS apps
Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/
-
LiteLLM hit by second supply chain attack this year, users urged to rotate credentials
A malicious release of LiteLLM pushed to PyPI and Docker registries on Wednesday carried malware built to harvest cloud logins, developer secrets and API keys for AI services … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/litellm-compromised-supply-chain-attack-pypi-docker/
-
The AI Agent Nobody Owns: Watch Expert Webinar On Your Newest Insider Threat
Right now, there is probably an AI agent running on a laptop somewhere in your network. It stores API keys and database passwords, can access your internal systems, and works without anyone watching.Nobody reviewed its access. Nobody owns it.If an employee had that much reach with that little oversight, you would call it an insider…
-
Kundendaten abgeflossen: Cyberangriff legt Cloudplattform Railway lahm
Railway ist Ziel eines Cyberangriffs geworden. Laut dem Plattformbetreiber sind Angreifer unter anderem an API-Keys und Zugangsdaten seiner Kunden gelangt. First seen on golem.de Jump to article: www.golem.de/news/kundendaten-abgeflossen-cyberangriff-legt-cloudplattform-railway-lahm-2610-214393.html
-
Salt Security wins three InfoSec Innovator awards
Salt Security has won three categories at Cyber Defense Magazine’s 2026 Top InfoSec Innovators awards, recognising its work in agentic AI and API security. The company received the Most Promising Agentic AI Security Solution, Trailblazing AI-based Cybersecurity Innovation and Transformational API Security Solution awards. The awards were announced at CyberDefenseCon 2026 in Orlando as part…
-
ConnectWise customers hit by supply-chain attack linked to compromised API secret
Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded. First seen on cyberscoop.com Jump to article: cyberscoop.com/connectwise-cloud-backup-supply-chain-attack/