AI Security Blog

You'll find useful content about AI security, the cybersecurity landscape, news, events and much more updated regularly here.

Compliance evidence should be a quick query, not a static spreadsheet you constantly need to rebuild

Compliance evidence should be a quick query, not a static spreadsheet you constantly need to rebuild

The frameworks are not the hard part. Proving that what you actually run lines up with them, on the day someone asks, is.

Latest articles

All
AI Governance
All
EU AI Act
All
OWASP LLM TOP 10
All
AI Security
All
Product
All
A View from the C-Suite
All
Fintech
All
cloud security
All
AI
All
Awards
All
API economy
All
podcast
All
WAF
All
Events
All
Cybersecurity
All
Cyber landscape
All
Company
All
API security
Cuckoo for CocoaPods
July 10, 2024

Cuckoo for CocoaPods

A researcher at EvaSec recently discovered a vulnerability in the CocoaPods ecosystem that could potentially affect an undetermined (but huge) number of web users.

Read more
MFA Breached via Unauthenticated APIs
July 8, 2024

MFA Breached via Unauthenticated APIs

What happens when the system designed to authenticate you to your online accounts is vulnerable itself? Threat actors recently verified phone numbers for millions of Authy users via an unsecured API endpoint.

Read more
New Cryptomining Campaigns Use Exposed Docker APIs
July 1, 2024

New Cryptomining Campaigns Use Exposed Docker APIs

A new type of API attack has been discovered- and it’s particularly pernicious. The target? Exposed Docker APIs. The objective? Spreading cryptojacking malware.

Read more
FireTail Using FireTail- Eating Our Own Dog Food
June 28, 2024

FireTail Using FireTail- Eating Our Own Dog Food

When Jeremy and I founded FireTail in 2022, our mission was to improve API security for everyone. And that included ourselves.

Read more
Google's GitHub Goof
June 17, 2024

Google's GitHub Goof

Google probably didn’t want this to happen. The tech giant accidentally posted a whole host of sensitive internal documents to GitHub that partly detailed the way the search engine ranks web pages.

Read more
Sensitive Meeting Data Left Vulnerable to Cyber Infiltration
June 13, 2024

Sensitive Meeting Data Left Vulnerable to Cyber Infiltration

Let’s talk about a recent example of an API vulnerability that was exploited to gain access to data within the German government.

Read more

Subscribe to receive articles directly in your inbox

If you prefer to be notified of new posts via email, simply subscribe to our blog below.