Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX ...

A hardcoded ClickUp API key exposed hundreds of corporate and government emails for over a year, raising new SaaS security ...

Google has stated that API keys for services like Firebase and Google Maps are 'safe to share,' but Truffle Security has discovered that the same keys can be used to access Gemini, the administrator's ...

A severe vulnerability in the AI-powered development tool Cursor allows installed extensions to access locally stored API keys and session tokens without user action, according to LayerX researchers.

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by ...

Exposed Google API keys allow attackers to run unlimited Gemini AI requests Developers experience severe financial losses due to unauthorized access to AI infrastructure Hardcoded credentials elevate ...

Application programming interfaces (APIs) are integral to the functionality of the internet today. By enabling communications between programs, they make many processes more efficient and convenient, ...