Latest API news

Hackers abused API to verify millions of Authy MFA phone numbers

Twilio has confirmed that an unsecured API endpoint allowed threat actors to verify the phone numbers of millions of Authy multi-factor authentication users, potentially making them vulnerable to SMS phishing and SIM swapping attacks.
- Lawrence Abrams
- July 03, 2024
- 12:43 PM
- 2
Club Penguin fans breached Disney Confluence server, stole 2.5GB of data

Club Penguin fans hacked a Disney Confluence server to steal information about their favorite game but wound up walking away with 2.5 GB of internal corporate data, BleepingComputer has learned.
- Lawrence Abrams
- June 05, 2024
- 04:15 PM
- 1
Cox fixed an API auth bypass exposing millions of modems to attacks

Cox Communications has fixed an authorization bypass vulnerability that enabled remote attackers to abuse exposed backend APIs to reset millions of modems' settings and steal customers' sensitive personal information.
- Sergiu Gatlan
- June 03, 2024
- 05:10 PM
- 0
Microsoft Copilot fixed worldwide after 24 hour outage

After over a 24-hour outage, Microsoft's Bing, Copilot, and Copilot in Windows services are back online worldwide, with no information released as to what caused the problem.
- Mayank Parmar
- May 24, 2024
- 01:59 PM
- 2
Dell API abused to steal 49 million customer records in data breach

The threat actor behind the recent Dell data breach revealed they scraped information of 49 million customer records using an partner portal API they accessed as a fake company.
- Lawrence Abrams
- May 10, 2024
- 03:30 PM
- 0
Google to crack down on third-party YouTube apps that block ads

YouTube announced yesterday that third-party applications that block ads while watching YouTube videos violates its Terms of Service (ToS), and it will soon start taking action against the apps.
- Bill Toulas
- April 16, 2024
- 02:01 PM
- 13
Winnti's new UNAPIMON tool hides malware from security software

The Chinese 'Winnti' hacking group was found using a previously undocumented malware called UNAPIMON to let malicous processes run without being detected.
- Bill Toulas
- April 02, 2024
- 05:59 PM
- 0
Trello API abused to link email addresses to 15 million accounts

An exposed Trello API allows linking private email addresses with Trello accounts, enabling the creation of millions of data profiles containing both public and private information.
- Lawrence Abrams
- January 23, 2024
- 04:31 PM
- 0
Halara probes breach after hacker leaks data for 950,000 people

Popular athleisure clothing brand Halara is investigating a data breach after the alleged data of almost 950,000 customers was leaked on a hacking forum.
- Lawrence Abrams
- January 11, 2024
- 03:28 PM
- 0
Google: Malware abusing API is standard token theft, not an API issue

Google is downplaying reports of malware abusing an undocumented Google Chrome API to generate new authentication cookies when previously stolen ones have expired.
- Lawrence Abrams
- January 06, 2024
- 11:40 AM
- 1
Sponsored Content
How Continuous Pen Testing Protects Web Apps from Emerging Threats

The nature and ubiquity of modern web apps make them rife for targeting by hackers. Learn more from Outpost24 about the value of continuous monitoring to secure modern web apps.
- Sponsored by Outpost24
- November 29, 2023
- 10:02 AM
- 0
ChatGPT down after major outage impacting OpenAI systems

OpenAI's AI-powered ChatGPT large language model-based chatbot is down because of a major ongoing outage that also took down the company's Application Programming Interface (API).
- Sergiu Gatlan
- November 08, 2023
- 09:43 AM
- 4
Cloudflare Dashboard and APIs down after data center power outage

An ongoing Cloudflare outage has taken down many of its products, including the company's dashboard and related application programming interfaces (APIs) customers use to manage and read service configurations.
- Sergiu Gatlan
- November 02, 2023
- 12:13 PM
- 0
Microsoft to start retiring Exchange Web Services in October 2026

Microsoft said today that the Exchange Web Services (EWS) API for Exchange Online and Office 365 will be retired in approximately three years.
- Sergiu Gatlan
- September 19, 2023
- 12:28 PM
- 0
ALPHV ransomware adds data leak API in new extortion strategy

The ALPHV ransomware gang, also referred to as BlackCat, is trying to put more pressure on their victims to pay a ransom by providing an API for their leak site to increase visibility for their attacks.
- Ionut Ilascu
- July 26, 2023
- 02:34 AM
- 0
Ivanti patches MobileIron zero-day bug exploited in attacks

US-based IT software company Ivanti has patched an actively exploited zero-day authentication bypass vulnerability impacting its Endpoint Manager Mobile (EPMM) mobile device management software (formerly MobileIron Core).
- Sergiu Gatlan
- July 24, 2023
- 04:05 PM
- 0
JumpCloud resets admin API keys amid ‘ongoing incident’

JumpCloud, a US-based enterprise software firm is notifying several customers of an "ongoing incident." As a caution, the company has invalidated existing admin API keys to protect its customer organizations. Headquartered in Colorado, the cloud-based directory-as-a-service platform serves over 180,000 organizations across the world.
- Ax Sharma
- July 06, 2023
- 06:23 AM
- 0
Honda API flaws exposed customer data, dealer panels, internal docs

Honda's e-commerce platform for power equipment, marine, lawn & garden, was vulnerable to unauthorized access by anyone due to API flaws that allow password reset for any account.
- Bill Toulas
- June 07, 2023
- 04:10 PM
- 1
Twitter API outage blocks sign-ins, breaks most platform features

Twitter users are experiencing issues worldwide when trying to log in or log out and when attempting to share their tweets, click links, embed tweets, and see images.
- Sergiu Gatlan
- March 06, 2023
- 12:23 PM
- 2
New Mimic ransomware abuses ‘Everything’ Windows search tool

A new ransomware family named 'Mimic' has been spotted in the wild abusing the APIs of a legitimate Windows file search tool called 'Everything' to achieve file enumeration.
- Bill Toulas
- January 26, 2023
- 03:22 PM
- 1