Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

New API testing category now available

Our API scanner can test for dozens of vulnerability types like prompt injections and misconfigurations. We’re excited to share today that we’re releasing vulnerability tests for OAuth API authorization for organizations that use JWT tokens. These JWT, or JSON Web Tokens, are meant to prove that you have access to whatever it is you are accessing. One of the most critical JWT vulnerabilities is algorithm confusion.

Key Takeaways for Partners from the Zenity AI Agent Security Summit

Having joined visionary leaders and top practitioners at ZenityLabs’ AI Agent Security Summit in San Francisco, I came away inspired and laser-focused on the incredible opportunities and responsibilities ahead for any organization looking to adopt and secure AI agents.

Downstream Data: Investigating AI Data Leaks in Flowise

Low-code workflow builders have flourished in the AI wave, providing the “shovels and picks” for non-technical users to make AI-powered apps. Flowise is one of those tools and, like others in its category, it has the potential to leak data when configured without user authentication. To understand the risk of misconfigured Flowise instances, we investigated over a hundred data exposures found in the wild.

Jingle Thief Gift Card Fraud: How Cloud Account Misuse Became a Pandemic for Retailers

Jingle Thief gift card fraud is a reminder that attackers don’t always need zero-day bugs or exotic malware to make millions — they need credentials and patience. In 2024–2025, security teams observed a financially motivated cluster (tracked by defenders as “Jingle Thief” / CL‑CRI‑1032) that focused on phishing and identity misuse to quietly harvest access to cloud platforms, then abuse gift-card issuance workflows at scale.

Beyond the AWS Outage: How CloudCasa and Any2Cloud Enable True Multi-Cloud Resilience for Kubernetes

When AWS’s US-East-1 region went down again this month, it reminded the industry of an uncomfortable truth: even the most trusted cloud platforms can fail. From streaming services to SaaS providers, many businesses were caught off guard, not because they lacked backups, but because they lacked redundancy. In a Kubernetes world, redundancy isn’t just about having data snapshots.

Is ChatGPT Safe? Understanding Its Privacy Measures

“Is ChatGPT safe” is the headline question that nearly every team asks the moment AI enters the room. The better version is: safe for what, and under which controls? Safety is not a single switch. It combines technical security, data privacy, content safeguards, governance, and how your people use the tool. This guide breaks down how ChatGPT handles data, where privacy risks actually come from, and the practical steps to operate safely at home and at work.

How to Download Videos Quickly: Find VidMate, Your Best Video Downloader

Have you ever come across an online video that you wanted to save and view later, without the hassle of internet speed and buffering? We've all been there. Whether it's your go-to song, a humorous clip, or a learn-it-all tutorial, the instinct to download it straight away is instinctive. And that's where VidMate enters the picture, a fast, simple, and trustworthy way to download videos and music from hundreds of sites. It's like your own "video vault," holding all your favorite content, ready to play even when you're not connected to the internet.

From Pickup to Delivery: The Seamless Process of Boxie24 Storage Units

Are you tired of the stress and hassle that comes with traditional self-storage? Finding the right storage facility, hiring a truck, and hauling heavy boxes can be overwhelming. Imagine a storage solution where you don't have to lift a finger. This new approach to renting storage units is designed to be completely stress-free. As a full-service storage company, we handle the pickup, storage, and return delivery, letting you focus on what truly matters. It's storage made simple, affordable, and convenient.

The Smartest Way to Start a Cybersecurity Career | Marius Poskus

Marius Poskus shares practical advice for those breaking into cybersecurity. He explains why beginners should start in Security Operations Centres (SOCs) rather than chasing rare pen‑testing roles. Building defensive skills first creates a stronger foundation and opens the door to any cybersecurity path—even in an AI‑driven future.