4 verified briefings on API Security. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Cloudflare now lets all developers use OAuth for third-party app integrations. This offers a more secure alternative to traditional API tokens, giving users granular control over what data and actions an application can access.
ServiceNow has patched a critical vulnerability in an unauthenticated API that could have exposed customer data. The company issued a fix after customers reported suspicious activity, suggesting the flaw may have been actively exploited.
Attackers breached Dashlane's systems and downloaded fewer than 20 encrypted user password vaults. While the data remains encrypted, the incident highlights a vulnerability in the company's API that allowed for a coordinated brute-force campaign.
Anthropic has launched new features for its Claude Managed Agents, allowing them to connect to internal enterprise APIs and databases without carrying credentials. This addresses a major security concern by letting teams run tool execution within their own infrastructure, preventing potential token leaks.