API Security — Tools & Articles — Practical Tools. Trusted Intelligence.

A darkened server hall with rows of rack indicator lights reflected on the floor

Cybersecurity 5 min Forged Admin Tokens Are Hitting WSO2 API Gateways Patched Five Months Ago A token signed with an algorithm the gateway does not support is accepted anyway. WSO2 scored it 10.0 and ship... KE Kenji Tanaka 17 Sep

A ring of old brass keys lying on a wooden desk beside a USB drive

Developer Tools 6 min One in Ten Exposed LiteLLM Gateways Answers to the Key in the Documentation Wiz found 9.6 per cent of 3,074 public LiteLLM proxies accepting sk-1234 or no key at all — which is why LiteL... MA Maya Lin 11 Sep

Close view of an open wooden door showing its metal handle, keyhole plate and the latch mechanism in the frame with the bolt withdrawn

Cybersecurity 6 min ServiceNow's Exploited Endpoint Was Not Broken. Its Auth Flag Was False. A Scripted REST API had its authentication flag set false, so anonymous requests ran as Guest. Exploited 2 to... KE Kenji Tanaka 4 Sep

An old industrial control panel covered in analogue voltage and current dials above a row of switches

Cybersecurity 7 min A Stolen Key Spent US$600,000 and No Invoice Ever Arrived An attacker took an API key from a researcher's personal server and spent US$600,000 of inference credits over... KE Kenji Tanaka 2 Sep