Browser-based identity attacks surge in 2025, targeting SaaS apps and weak credentials across enterprise accounts.

The connected sex toy platform Lovense is vulnerable to a zero-day flaw that allows an attacker to get access to a member's email address simply by knowing their username, putting them at risk of ...

Exposed API documentation is a gift-wrapped roadmap for threat actors. The free Autoswagger tool from Intruder scans for ...

McDonald’s AI-powered hiring platform, McHire, has come under scrutiny after a critical security flaw exposed the personal data of up to 64 million job applicants. Researchers discovered that the ...

Stringing together multiple API requests across systems brings agentic workflows within reach. While CIOs underscore the ...