No Hack Required: How Thousands of Leaked API Tokens Left Automation Servers Wide Open

GitGuardian found thousands of leaked n8n API tokens, with hundreds still granting access to live automation servers, ...
The Hacker News

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...
Tech Times on MSN

NuGet kills 365-day API keys: GitHub Actions can go keyless, Azure DevOps cannot

NuGet API key expiration 2026: Microsoft caps new NuGet.org API keys at 30 days starting August 17, forcing all existing keys ...
Dark Reading

Neosec Introduces Automated Tokenization to Enable Full API Visibility Without Exposure of Sensitive Data

PALO ALTO, Calif., Nov. 15, 2022 /PRNewswire/ — Neosec, the pioneer in discovering and identifying API threats using behavioral analytics, today announced that it now tokenizes API activity data to ...
Security Boulevard

OpenAI Workload Identity Federation: Aembit Brings Secretless Access to the OpenAI API

Aembit already covers a lot of ground when it comes to securing AI workload access. For OpenAI’s ChatGPT, workloads can authenticate to the ChatGPT API using static API key injection, with the Aembit ...
The Hacker News

OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning

Replayable AI reasoning blocks let researchers recover API keys and passwords from public logs; they say the main extraction ...