API security

IBM has warned that exploitation of a critical authentication bypass bug in its API Connect end-to-end application programming interface solution, tracked as CVE-2025-13915, could enable remote app access, The Hacker News reports.

Almost 29% of web traffic during the third quarter has been attributed to bots, indicating the rise of automated activity, even if humans still accounted for the most activity, reports SiliconANGLE.

Ask Pepper AI addresses the common challenge of security teams being overwhelmed by data and lacking clear visibility in complex cloud environments.

Cloudflare outage causes concern as service keeps websites online during cyberattacks.

Infosecurity Magazine reports that API keys, credentials, tokens, and other verified secrets had been leaked on GitHub by 65% of the 50 leading artificial intelligence firms listed by Forbes, which were valued at over $400 billion.

Rather than leveraging AI capabilities, the attacker stores commands in Assistant messages.

AI adoption has made APIs the new control plane for agents, LLMs, and autonomous systems, yet most organizations still secure them with legacy methods. The result: blind spots, stalled releases, and rising AI-driven risk. The H2 2025 State of API Security Report reveals how API risk is impacting enterprise AI initiatives and what leading organi...

Threat actors have abused Milesight Industrial Cellular routers' APIs to launch a wave of smishing attacks across Europe, according to Infosecurity Magazine.