Apify Responds to Breach by Rotating API Tokens and Prompting 2FA Resets
Apify has taken swift action after detecting unauthorized access to its internal systems, rotating API tokens, and prompting 2FA resets for affected users.
Search
Find a quick tip
Results for "Tokens".
Over 16,000 Supabase databases expose PII, passwords, auth tokens
Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables with personally identifiable information, passwords, or authentication tokens.
EvilTokens PhaaS Platform Disrupted: Insights and Mitigation Strategies
EvilTokens PhaaS disrupted after compromising over 12,000 Microsoft accounts, offering advanced phishing techniques and device-code authentication.
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
US says Chinese firms extracted billions of tokens from frontier AI models
U.S. cybersecurity and intelligence agencies say that six Chinese AI companies conducted industrial-scale distillation attacks on American frontier AI models since at least late 2024.
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.
The Army Is Burning Through Its AI Tokens
Members of the Army received an email informing them that they were rapidly depleting their AI tokens, and needed to limit.
We built a vulnerability vending machine: AI tokens in, zero-days out
Intruder built an AI-powered "vulnerability vending machine" that combines code slicing with LLMs to automatically discover complex software vulnerabilities.
ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
A new phishing-as-a-service (PhaaS) platform dubbed "ARToken" appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed to compromise Microsoft 365. [.
VS Code zero-day lets hackers steal GitHub tokens in one click
A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a link.
Cybersecurity Alert: Hackers Exploit GitHub Accounts to Steal Cloud Credentials and Secrets
Hackers compromised 4,800 GitHub accounts to steal cloud credentials and secrets, including those from Fortune 100 companies and government entities. The threat actor used malicious workflows to inject stolen data into open-source software ecosystems.
Cybersecurity Alert: Notion Reveals Fireworks AI Breach Exposed Customer Chat Transcripts
Notion, the digital workspace platform, has disclosed that a security breach at its AI infrastructure provider, Fireworks AI, exposed customer chat transcripts in a limited number of workspaces, following a series of data breaches.
Chainalysis Reveals Data Breach: Credentials for All Customers Exposed
Blockchain intelligence firm Chainalysis reports a breach exposing credentials and live tokens for all customers, affecting law enforcement, financial institutions, and cryptocurrency businesses worldwide.
FBI Identifies North Korean Hackers as Culprits in $6.3 Billion Binance Crypto Heist
FBI confirms North Korean hackers as responsible for the largest cryptocurrency theft, affecting Binance.
The Huntress Tragic Quadrant: Prioritizing Business Threats
The Huntress Tragic Quadrant ranks the cyber tactics that pose the greatest risk to businesses, helping organizations focus their defenses regardless of the latest headlines.
OpenAI Launches GPT-6.1 Terra: Faster, Cheaper, and More Capable AI Agents
OpenAI has introduced GPT-6.1 Terra, a new model optimized for computer use, visual reasoning, coding, and everyday work, offering faster and more cost-effective solutions compared to its larger counterparts.
Detecting and Responding to Machine Speed Attacks: A Comprehensive Guide
Machine speed attacks have become a significant concern, with attackers now enumerating data within 15 minutes of gaining access. This guide explores three common attack patterns and highlights the importance of effective detection and response.
How to Use Hugging Face’s Carbon-X Model to Understand DNA: A Practical Guide
Hugging Face has released a new model, Carbon-X, that enables users to interact with DNA through natural language. This tool can help researchers and patients understand genetic mutations and design therapies.
Plex Media Server Security Guide: Patching and Mitigation Strategies
Plex Media Server is a popular media suite that can be exploited by hackers through vulnerabilities in its Plex2Shell attacks. This guide provides comprehensive information on how to protect your systems and mitigate these security risks.
Canadian Cybersecurity Executive Arrested in Connection with ShinyHunters Hackers
Canadian cybersecurity executive Edward Dubrovsky arrested in Pennsylvania for alleged extortion linked to ShinyHunters hackers.
FBI Disrupts Chinese Hacking Tools Used in Critical Infrastructure Breaches
FBI seizes hacking tools used by Chinese state-sponsored hackers to breach critical infrastructure, including power companies, universities, and government agencies.
Meta Muse: A Comprehensive Guide to AI's Exciting New Agent
Meta Muse offers a user-friendly AI agent that excels in tasks like personal RSS feeds and product searches, making it a valuable addition to your tech toolkit.
Bitget Resumes Bitcoin Withdrawals After Massive Crypto Heist
Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals after a $387.5 million theft, addressing security vulnerabilities and restoring services.
GitHub Actions Compromised Again: Mini Shai-Hulud Supply-Chain Attack Continues
Two compromised GitHub Actions were re-enabled, pointing to malicious code for over a week, despite efforts to remove them.
GitLab Project Email Addresses Exposed: A Comprehensive Guide to Mitigating Risks
GitLab project email addresses, used for issue and task management, are being exposed in public documentation, posing significant security risks.
Malware bypasses browser checks to force install Chrome, Edge extensions
A banking malware operation active since mid-2025 has been using a toolkit named KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data.
Surfshark VPN Incident: A Closer Look at the Breach and Response
Surfshark disclosed a security breach affecting internal testing servers, but emphasized no customer data was compromised.
ShinyHunters Hackers Exploit Florida DMV Database: A Comprehensive Guide
ShinyHunters hackers breached Florida's DMV database, stealing over 200,000 driver records. They also released a screenshot of Jeffrey Epstein's DMV record.
Mathspace Data Breach Affects Over 1 Million Users: A Comprehensive Guide
Mathspace, an online learning platform, disclosed a data breach affecting over 1 million users, including students, staff, and parents. This guide explains the breach and provides recommendations.
Coder's Registry Infrastructure Compromised to Push Malicious Modules
Coder's cloud development platform suffered an infrastructure compromise, leading to the delivery of malicious Terraform modules containing credential-stealing code.