4 stories tagged api-security, newest first.
1206 points by hiisthisthingon | 288 comments
Truffle Security blog post explaining that public Google API keys, long deemed non-secret, can now access Gemini and private data, based on scans of exposed keys.
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.
543 points by speckx | 320 comments
Sam Curry's writeup on Kia web vulnerabilities that allowed remotely controlling vehicle functions using only a license plate number.
795 points by xrayarx | 164 comments
Sam Curry's blog post on discovering vulnerabilities that allowed hacking millions of ISP modems, and investigating who compromised his own modem.