Claude API Workbench shuts down today, closing the export window for saved prompts, variables, and evals. Teams that missed ...

Spread the loveIf you’ve spent any time at all interacting with APIs, you’ve probably stumbled upon Postman. It’s become the ...

Security researcher Kevin Beaumont got a call last week from a major US technology company that insisted it had nothing to worry about: all the credentials stolen in March's LiteLLM supply chain ...

Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was blamed on and claimed by TeamPCP, ...

Encrypted AI reasoning vulnerability in Anthropic, OpenAI, and Google APIs let researchers decode 315,320 published session ...

A team of eight researchers reports that encrypted reasoning blocks returned by major AI model APIs can sometimes be recovered.

New VentureBeat survey data: 69% of enterprises share AI agent credentials, letting one compromised agent inherit the access of every workflow it touches.

Security researchers have uncovered a coordinated campaign designed to steal developers’ AI-related API keys via malicious plugins. Aikido Security found at least 15 integrated development environment ...

Google API keys aren't completely inactive after users delete them, giving attackers a small but significant window to continue abusing them. Joe Leon, researcher at Belgian startup Aikido Security, ...

Web infrastructure provider Vercel disclosed a security breach that may have exposed customer API keys, prompting crypto projects to rotate credentials and review their code. Vercel traced the ...