Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...

Brevo is a French SaaS company that provides a digital marketing and customer communication platform for businesses. It was ...

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

ONLYOFFICE expanded its developer platform with a new PDF API and additional document automation capabilities. To view an enhanced version of this graphic, please visit: ...

This article is a memo summarizing the numerous pitfalls I encountered when trying to integrate the Google Calendar API into ...

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Security testing helps find vulnerabilities before attackers do. Learn how input validation, authentication, SAST, DAST and ...

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May ...