Claude AI helped a security researcher exploit a SQL injection flaw in Front Gate Tickets, Live Nation's festival ticketing platform. The vulnerability exposed 500+ database tables, employee ...

Apple has begun sending lock-screen notifications to a subset of iPhone users, alerting them that their devices face active ...

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

Mustang Panda’s Zoho WorkDrive attack hid two espionage campaigns inside India’s trusted cloud storage platform this month, ...

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

In 2025 and 2026, several independent sources have highlighted the same trend: Prompt injection remains one of the most ...

OpenAI previewed GPT-5.6 Sol, Terra and Luna as safety tests flagged stronger cyber capabilities and a greater risk of ...

Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Security researchers identified a coordinated malware campaign within the JetBrains Marketplace designed to exfiltrate developer API keys.

pentestlab/ ├── api/ # Labs API Security │ ├── apichainexploit/ # API Chain Exploitation │ ├── basics vuln/ # Vulnérabilités basiques (SQLi ...