Latest API news

Chrome 84 released with important security enhancements

Google has released Chrome 84 today, July 14th, 2020, to the Stable desktop channel, and it includes numerous security enhancements and new APIs for developers.
- Lawrence Abrams
- July 14, 2020
- 02:44 PM
- 0
Cloudflare dashboard and APIs are down, some sites having issues

Cloudflare is experiencing outages in multiple components of its infrastructure including, the dashboard, API, and their Argo smart routing feature that are causing issues for some sites that are using them.
- Lawrence Abrams
- April 15, 2020
- 01:55 PM
- 0
SoundCloud Fixed API Flaws That Could Lead to Account Takeover

Social audio platform SoundCloud fixed multiple security vulnerabilities affecting its application programming interface (API) that could allow potential attackers to take over accounts, launch denial of service attacks, and exploit the service according to the Checkmarx Security Research team.
- Sergiu Gatlan
- February 11, 2020
- 09:00 AM
- 0
Twitter Fixed Issue Exploited to Match Phone Numbers to Accounts

Twitter says that it discovered and fixed an issue exploited by attackers to match specific phone numbers to their corresponding Twitter accounts.
- Sergiu Gatlan
- February 03, 2020
- 04:35 PM
- 0
Starbucks Devs Leave API Key in GitHub Public Repo

One misstep from developers at Starbucks left exposed an API key that could be used by an attacker to access internal systems and manipulate the list of authorized users.
- Ionut Ilascu
- December 31, 2019
- 01:05 PM
- 0
Researcher Adds $100,000 Worth of Credit to Voi E-Scooter App

A Swedish security enthusiast was able to take advantage of some weaknesses in the Voi scooter mobile app to get $100,000 worth of free rides.
- Ionut Ilascu
- October 08, 2019
- 10:30 AM
- 0
Hostinger Data Breach Affects Almost 14 Million Customers

Hosting provider Hostinger today announced that it reset the login passwords of 14 million of its customers following a recent security breach that enabled unauthorized access to a client database.
- Ionut Ilascu
- August 25, 2019
- 04:00 PM
- 0
Hotel Kiosks Could Be Unsafe Due to Exposed Keys in Tech Tool

Researchers found that an application available on an unsecured website included credentials that could have allowed compromising consumer-facing Uniguest kiosks used by businesses in various activity sectors.
- Ionut Ilascu
- July 11, 2019
- 09:29 AM
- 0
Microsoft Windows Defender ATP APIs Now Generally Available

Microsoft announced the general availability of the Windows Defender Advanced Threat Protection (ATP) programmatic application programming interface (API) which allows customers to create their custom apps using Microsoft Defender ATP's capabilities.
- Sergiu Gatlan
- April 22, 2019
- 05:00 PM
- 0
Unsecured API Leads to 'Yelp for Conservatives' App Data Leak

The API of the 63Red Safe mobile app known as "Yelp for conservatives" was found by French security researcher Robert Baptiste wide open, with no authentication needed to access and view the data stored within the app's database.
- Sergiu Gatlan
- March 12, 2019
- 04:19 PM
- 0
Google Outage Causing Google Charts and Other APIs to Not Work

If you use Google Charts, or other Google API libraries, as part of your web site then you may have noticed that they stopped working. This is being caused by an outage at Google that is causing the older jsapi library and causing the URL to return a 502 error.
- Lawrence Abrams
- January 31, 2019
- 05:34 PM
- 0
Google Emails Users About Private Data Exposed by Google+ API Bug

Google has started sending out notifications to those who were affected by their Google+ API bug that was disclosed in December 2018. This notification provides details regarding what profile data was exposed and the apps that had access to it.
- Lawrence Abrams
- January 07, 2019
- 11:12 AM
- 2
Twitter Fixes Bug That Gives Unauthorized Access to Direct Messages

A bug affecting the permissions dialog when authorizing certain apps to Twitter leaves direct messages exposed to the third-party without the user ever knowing about it.
- Ionut Ilascu
- December 15, 2018
- 09:58 AM
- 0
Bug in Google+ API Puts at Risk Privacy of over 52 Million Users

Non-public details on about 52.5 million Google+ profiles were accessible to developers of apps requesting permission to view data the user had configured to remain private.
- Ionut Ilascu
- December 10, 2018
- 04:14 PM
- 0
Botnet of 20,000 WordPress Sites Infecting Other WordPress Sites

A botnet consisting of over 20,000 WordPress sites is being used to attack and infect other WordPress sites. Once compromised, these new sites are added to the botnet so that they too can be used to perform commands for the attackers.
- Lawrence Abrams
- December 06, 2018
- 04:50 PM
- 0
Google+ Shutting Down After Bug Leaks Info of 500k Accounts

Google has announced that they are closing the consumer functionality of Google+ due lack of adoption and an API bug that leaked the personal information of up to 500,000 Google+ accounts.
- Lawrence Abrams
- October 08, 2018
- 02:21 PM
- 3
Twitter Bug May Have Sent your Direct Messages to Twitter Developers As Well

In an alert on Twitter, the social network is alerting users that for over a year, their direct messages and private tweets may have been sent to Twitter developers by mistake.
- Lawrence Abrams
- September 21, 2018
- 03:14 PM
- 1
Twitter Removes 143,000 Apps That Violated Company's Policy

Twitter said this week it removed more than 143,000 apps from its platform between April and June as part of a purge on apps that violated its API policy.
- Catalin Cimpanu
- July 26, 2018
- 12:30 AM
- 1
PayPal's Venmo App Exposes Most Transactions via Its API

The vast majority of Venmo transactions are being logged in a public API accessible to anyone, according to the recent investigation of a privacy advocate.
- Catalin Cimpanu
- July 18, 2018
- 06:11 AM
- 0
Misconfigured EOS Blockchain Nodes Under Attack

A mysterious attacker is scanning the Internet for EOS blockchain nodes that are accidentally exposing private keys through an API misconfiguration.
- Catalin Cimpanu
- May 29, 2018
- 04:45 PM
- 0