Today’s attack surface is shifting from the endpoint to the API, and AI and third-party SaaS are worsening the issue. CISOs offer advice for API defense.

Attackers weaponized critical RCE within hours, prompting CISA to add the flaw to its KEV catalog and set an urgent patch ...

Aptori, the pioneer of autonomous, runtime-driven application and API security for the AI era, today announced that it has been named a winner of three prestigious Global InfoSec Awards at RSAC 2026, ...

OpenClaw has reached 500,000 internet-facing instances with three unpatched high-severity CVEs, no enterprise kill switch, ...

Authorization vulnerabilities are the most common critical finding in our API penetration tests. We find them on nearly every ...

For years, a lot of risky APIs survived simply because they were hard to find. They weren’t documented. Only a handful of ...

CrowdStrike, Cisco, and Palo Alto Networks all announced agentic SOC tools at RSAC 2026. A VentureBeat analysis of all three ...

Anthropic accidentally leaked key details of its AI tool Claude Code.

Threats actors pounced on the vulnerability within hours of its disclosure, demonstrating that organizations have little time ...

Google just rolled up with the bellhop. In case you missed it, Google's new "switching tools" let you paste a one-shot Memory ...

Threat actors have started exploiting CVE-2026-21643, a critical vulnerability in Fortinet FortiClient EMS leading to remote ...

Coinspect has been part of the blockchain security landscape since 2014, a time when few organizations were examining ...