Lina Romero

Articles by

November 28, 2025

WhatsApp with these APIs?

WhatsApp, the popular encrypted messaging platform which is used across the world, had API flaws that left billions of users vulnerable to scraping...



November 21, 2025

LLM09: Misinformation

The OWASP Top 10 Risks for LLMs helps shed light on the top vulnerabilities to AI in today’s landscape. In this blog, we’ll go over LLM09: Misinformation. What it is, how to mitigate it, and more.



November 7, 2025

LLM08: Vector & Embedding Weaknesses

In an ecosystem of constantly rising AI threats and attacks, the OWASP LLM Top 10 is here to give guidance on the biggest risks in the landscape and how to combat them. Today’s blog dives into #8: Vector and Embedding Weaknesses.



September 30, 2025

LLM07: System Prompt Leakage

The OWASP Top Ten Risks for LLMs is a comprehensive list for security researchers to assess vulnerabilities in AI models. Today’s blog will dive in-depth into item 7: System Prompt Leakage.



September 30, 2025

Docker APIs Targeted

Once again, Docker APIs are a target of threat actors in a new method of attack dating back to June 2025, or even earlier. Research is ongoing.



September 5, 2025

LLM06: Excessive Agency

Agentic AI is introducing new risks to cybersecurity worldwide. The OWASP Top 10 Risks for LLMs breaks down the biggest risks in the landscape. Today’s blog will tackle #LLM06: Excessive Agency.



August 28, 2025

What You Don’t Log Will Hurt You

We’ve talked before about the importance of logging in your AI and API security posture. But what happens when organizations fail to log their interactions adequately? And what can you do within your own organization to prevent this? Explore all this and more with the latest webinar from FireTail.



August 9, 2025

FireTail at Black Hat USA 2025: Finalist in the Startup Spotlight

FireTail was one of four startups selected as a finalist in the Black Hat USA 2025 Startup Spotlight Competition. This week was unforgettable and reaffirmed the urgent demand for AI security solutions.



August 4, 2025

OWASP LLM Risk #5: Improper Output Handling

As AI attacks increase, it is more important than ever to be aware of risks. The OWASP Top 10 Risks for LLMs is a great jumping off point. In this blog, we’ll be deep-diving the 5th item on the list: Improper Output Handling.



June 29, 2025

OneLogin, More Problems

OneLogin, a popular identity and access management platform, had vulnerabilities that exposed user credentials. Through simple probing, researchers were able to access a host of sensitive data…



June 6, 2025

LLM04: Data & Model Poisoning

In this blog series, we’re breaking down the OWASP Top 10 risks for LLMs and explaining how each one manifests and can be mitigated. Today’s risk is #4 on the list: Data and Model Poisoning. Read on to learn more…



June 4, 2025

When AI Turns Against Us

Computers going rogue used to be the stuff of science fiction. But in 2025, it is becoming real. Join us in this blog as we investigate some cases where Artificial Intelligence has behaved like it has a mind of its own…



May 28, 2025

Your Mobile Apps May Not Be as Secure as You Think…

Cybersecurity risks are too close for comfort. Recent data from the Global Mobile Threat Report reveals that our mobile phone applications are most likely exposing our data due to insecure practices such as API key hardcoding.



May 21, 2025

LLM03: Supply Chain

The OWASP Top 10 List of Risks for LLMs helps developers and security teams determine where the biggest risk factors lay. In this blog series from FireTail, we are exploring each risk one by one, how it manifests, and mitigation strategies. This week, we’re focusing on LLM03: Supply Chain vulnerabilities.



May 14, 2025

Closing the Loop: Continuous API Security Testing

APIs power all of the connections we take for granted in the modern internet. But as we rely on them more for new technologies like AI, securing them is harder than ever. That’s why continuous API security testing is an essential part of every cybersecurity posture.



May 8, 2025

An open letter to FireTail customers about security and data privacy

Our modern “Software as a Service” model is becoming a challenge for cybersecurity teams within large enterprises, as attacks continue to rise in volume and complexity across the cyber realm. Security needs to be a consideration from code to cloud, or any progress we make will be undone just as quickly.



May 8, 2025

LLM02: Sensitive Information Disclosure

OWASP’s Top 10 for LLM is a good starting point for teams to learn about AI security risks. In this series, we’ll go over each risk and practices to protect against them. Today, we’re tackling LLM02: Sensitive Information Disclosure.



April 23, 2025

Securing AI Innovation Without Sacrificing Pace

The AI race is driving developers to release more and more AI models in competition and security teams are struggling to keep up. So how do we continue to innovate at this speed, while still ensuring the security of our AI models?



April 11, 2025

The New CIS API Security Guide

It’s here! The New CIS Guide for API Security provides teams with actionable steps for their own API security postures. API use is skyrocketing with the recent adoption of AI, and security teams are struggling to keep up with the rising threats. That’s where the CIS Guide comes in.



April 8, 2025

Enhanced AI Security Capabilities from FireTail

FireTail’s latest platform update gives customers expanded AI security features and discovery capabilities to better find, document and protect AI initiatives across your organization. Here, we look at what the update covers and the benefits these new features deliver for FireTail customers.



April 1, 2025

Prompt Injection: A Deep Dive into OWASP's #1 LLM Risk

In this blog, we are taking a closer look at Prompt Injection, the #1 vulnerability on the OWASP Top 10 list of LLM risks in 2025. Join us in the first of this 10-part series as we examine the root causes of prompt injection, how prompt injection attacks are carried out, and the best methods to avoid them.



March 20, 2025

Tomcat RCE Vulnerability Now Exploited in the Wild

Researchers recently found a vulnerability in Apache Tomcat’s servers that would allow an attacker to commit Remote Code Execution with a single PUT request to a specific API, followed by a GET. And now, this vulnerability is officially being exploited in the wild.



March 3, 2025

API Security IS AI Security

Security teams today face a dual challenge: protecting AI systems from external threats while securing the APIs that power them. The reality is clear—if your APIs aren’t secure, neither is your AI.



March 3, 2025

OmniGPT’s Massive Alleged Breach…

A BreachForum user came out claiming to have breached OmniGPT and shared samples of stolen data to back up this claim. Weeks later, researchers are still scrambling to figure out the scope, attack method, and more.



February 18, 2025

What We Can Learn from The New Malware Abusing Microsoft

Today’s cyber landscape is littered with threats, risks, and vulnerabilities. Every week, we are seeing an increase not only in attacks, but also in the methods used to attack. This week, a new family of malware was discovered exploiting Microsoft’s Graph API.



February 18, 2025

AI & API: Double Rainbow for Cybersecurity

AI security and API security run alongside each other, much like a double rainbow. Each one contains a full spectrum of security requirements that work in tandem with one another.



January 30, 2025

DeepSeek, Shallow Security

We’re only a month into the new year, and already, the internet is buzzing with news about AI. Most recently, China’s AI platform DeepSeek has been making whale-sized waves in the cyberworld. But a week after the launch of its new model on January 20th, a tsunami-sized wave hit the system.



January 23, 2025

OpenAI? Also Open to Abuse

In 2025, AI is the biggest advancement in cybersecurity and the talk of all tech-sperts. But as AI continues to develop, we are seeing a surge in not only the benefits, but also the risks of artificial intelligence.



December 10, 2024

API Discovery: The Foundation of Security

Many security teams are still not aware of all the APIs in their landscape. Read the latest blog from FireTail to learn about the importance of API discovery and how you can discover all the APIs in your landscape today.



November 21, 2024

The Secrets of APIs...

This blog post will answer questions such as: But where do APIs live? And how do they interact? What languages do they use?



November 14, 2024

Crossbarking via Chrome Extension

Attackers used an attack method known as “crossbarking” via a malicious Chrome extension to inject custom code into the target’s Opera browser.



November 11, 2024

Microsoft Sharepoint Vulnerability Disclosure

Microsoft Sharepoint recently patched vulnerabilities that highlighted the need for highly privileged user access to happen via secure APIs.



November 1, 2024

FireTail support for Enhanced Payload Logging For AWS API Gateway V1

The latest update to FireTail’s platform introduces enhanced logging capabilities for API Gateway V1, offering detailed insights into request and response data, including headers, bodies, and additional metrics.



October 22, 2024

FireTail Joins Wiz Integration (WIN) Platform

Technology Partnership Enables Mutual Customers to Reduce Cloud Risk and Enhance API Security.



October 16, 2024

Disclosure: Multiple Vulnerabilities in Granicus eFiling Platform

Granicus, a platform offering government solutions including an efiling platform called eUniversa, was recently discovered to be vulnerable to outside attack.



October 16, 2024

Star Health Data Leak: The Call is Coming from Inside the House

Star Health suffered a massive data leak via API access. The personal information of millions of victims has been compromised, and worst of all, there may have been an insider who facilitated the breach.



October 15, 2024

Ecovacs Hurl Obscenities at Unsuspecting Users

Ecovac customers in Australia were startled when their vacuums began talking back to them, most notably using racial slurs. This was made possible through remote access and manipulation of the “smart” devices.



October 9, 2024

Hackers Exploiting Docker Swarm, Kubernetes, & SSH Servers

Researchers from DataDog recently discovered that hacker groups are targeting Docker Swarm, Kubernetes and SSH servers in one orchestrated attack using Docker API endpoint vulnerabilities.



October 1, 2024

Versa is Vulnerable

Web application and service creation platforms rely on APIs for their functionality. However, one such platform, Versa Director, is vulnerable to API attacks and token theft.



October 1, 2024

New Vulnerability could allow for Remote Takeover of KIAs…

Researchers found a new vulnerability that affects KIA systems and could allow anyone remote control over their vehicles using only a license plate.



September 20, 2024

Feeld Dating App API

APIs are used for everything, including dating apps. Feeld, a dating app targeted at multi-person relationships, recently faced an API vulnerability that exposed sensitive data, leaving users unsettled.



September 19, 2024

Escalating from Reader to Contributor in Azure API Management

APIs can have many different types of security challenges, even those of tech giants such as Microsoft. In this blog, we’ll explore a recent vulnerability that affected Microsoft’s Azure API Management, and explore what that implies for the cloud shared responsibility model



September 10, 2024

MoveIT Breaches have Lasting Impacts on Wisconsin Medicare

In Wisconsin, nearly a million Medicare users’ personally identifiable information has been exposed as a result of the moveIT breaches of yester-year.



September 10, 2024

FireTail Selected for TechCrunch Disrupt’s Startup Battlefield 2024

We are thrilled to announce that FireTail has been selected to compete in TechCrunch Disrupt’s prestigious Startup Battlefield 2024! Being part of this prestigious event is an honor and testament to the hard work our team has put into building a cutting-edge API security platform.



August 28, 2024

The Challenges of API Logging

APIs can run almost anywhere, including any type of compute platforms and network infrastructure services on AWS. In this blog, we’ll go over the different types of compute platforms, network infrastructure services, and how they relate to your APIs and API security.



August 19, 2024

API Vulnerabilities in Solar Panel Systems

Recent vulnerabilities discovered in popular solar-power platforms highlight the need for API security across IoT and OT technology platforms.



August 2, 2024

Selenium Grid Target of Malware Attack

There is also a massive lack of awareness around APIs and API endpoints. Many developers buy 3rd party software packages without realizing that they contain a variety of APIs with their own unique vulnerabilities.



July 26, 2024

Cloudflare’s Application Security Report

Cloudflare released its latest Application Security Report, which contained some startling news. They found that nearly 7% of all web traffic is malicious. But what does this really mean?



July 23, 2024

Google Cloud Security Threat Horizons Report #10

Google Cloud Security released an updated Threat Horizons report containing information about the top security risks. Here are our notes from the report.



July 19, 2024

Life 360 Phone Number Leak

Location-sharing services, like much of the modern internet, are powered by APIs. Because these APIs handle personally identifiable information such as addresses, phone numbers and more, breaches in these apps can lead to serious safety issues for users everywhere.



July 19, 2024

Apache Hugegraph Under Attack

With new API threats popping up every day, no one is safe from vulnerability. This is especially dangerous when it comes to large, widely used servers such as Apache HugeGraph.



July 11, 2024

Apple Leaks Location Data

Some companies position privacy as a key value proposition of their products and services. But that may not always be as true as advertised.



July 10, 2024

Cuckoo for CocoaPods

A researcher at EvaSec recently discovered a vulnerability in the CocoaPods ecosystem that could potentially affect an undetermined (but huge) number of web users.



July 8, 2024

MFA Breached via Unauthenticated APIs

What happens when the system designed to authenticate you to your online accounts is vulnerable itself? Threat actors recently verified phone numbers for millions of Authy users via an unsecured API endpoint.



July 1, 2024

New Cryptomining Campaigns Use Exposed Docker APIs

A new type of API attack has been discovered- and it’s particularly pernicious. The target? Exposed Docker APIs. The objective? Spreading cryptojacking malware.



June 17, 2024

Google's GitHub Goof

Google probably didn’t want this to happen. The tech giant accidentally posted a whole host of sensitive internal documents to GitHub that partly detailed the way the search engine ranks web pages.



June 13, 2024

Sensitive Meeting Data Left Vulnerable to Cyber Infiltration

Let’s talk about a recent example of an API vulnerability that was exploited to gain access to data within the German government.



June 10, 2024

When the Internet Connects to You

Researcher Sam Curry recently discovered some alarming vulnerabilities in his modem, a Cox Panoramic wifi gateway. It all started when he noticed an unknown IP address was copying his same HTTP requests.



June 7, 2024

What CISOs Need to Know About API Security in 2024

In this talk, Jeremy will cover key knowledge from the cybersecurity landscape for CISOs in 2024. Tune in to hear valuable insights and takeaways every CISO can apply in their own security posture today. API security is the cornerstone of strong cybersecurity for CISOs.



May 29, 2024

Home Access Control APIs Leave Users in Hot Water

A lot of our API use happens at home, in places you might not even expect. What happens when these APIs are left vulnerable?



May 23, 2024

Vulnerabilities found in Fluent Bit Logging Tool API

Many companies use Fluent Bit, or tools built on top of the underlying fluentd package, for tracking performance, observability and system events, and create metrics and monitoring alerts. However recently, a new vulnerability has come to light on the platform.



April 30, 2024

Postman Delivering Secrets

In February of 2021, Postman launched a public API platform where developers could collaborate to build software. Now in 2024, Postman has the largest collection of public APIs. Naturally, this makes it a prime target for attackers.



April 11, 2024

Revisiting Cambridge Analytica in 2024

The Cambridge Analytica Data Scandal led to the collapse of the company, court cases and massive fines for Meta. It highlighted the massive impact that technology was having on society, politics and democracy. Now, almost a decade later, we take a look at how a poorly configured API started it all.



February 19, 2024

There's No AI Without APIs

Everybody is talking about AI right now. It's the hottest topic in tech. But few people are talking about the APIs that underpin these AI platforms. Here we look at why effective API security is a must for any organization who wants to harness the power of AI.



February 9, 2024

Client Spotlight - Tidal Cloud

FireTail CEO Jeremy Snyder sits down with Philip Rees, CTO at Tidal Cloud to discuss the reasons, roadblocks and rewards of cloud migration as well as how Tidal Cloud uses FireTail to protect its API inventory.



January 17, 2024

Disclosure: Work Application Vulnerability

FireTail CTO Riley found a web application vulnerability. He noticed when the app was open, and he had tools open, one of the requests was going to an API instead of a web application.



December 20, 2023

FireTail at Apidays Paris 2023

Apidays Paris 2023 was a wonderful event for cybersecurity professionals of all kinds and anyone interest in the power of APIs. Our co-founder and CEO Jeremy Snyder gave a talk that dove into the complex new challenges in API security, including how to bridge the gap between developers and security teams.



December 19, 2023

Webinar: The Cyber Landscape Outlook 2024

FireTail CEO Jeremy Snyder hosts an insightful discussion with a panel of cybersecurity experts. Mikko Hypponen, Sounil Yu and Ted Julian shared their thoughts on the emerging threats and cybersecurity trends likely to shape the next 12 months.



December 18, 2023

Disclosure: Remote Data Service

Various APIs belonging to a data service are leaking their Git repositories, at a backend API which contain the APIs' source code.



November 16, 2023

Disclosure: Financial Application

Unauthorized users could gain access to sensitive financial information via an application's API using the data leaked via Github.



November 15, 2023

FireTail at SecOps Vision for 2024

SecOps Vision for 2024, powered by Techstrong Learn, gave industry professionals the opportunity to connect and share security strategies. FireTail CEO, Jeremy Snyder, was pleased to provide the assembled audience with insights into the importance of API security at the intersection of cloud and application security.



September 24, 2023

Disclosure: European Shipping Company

FireTail researcher Viktor Markopoulos discovered a vulnerability in a European Shipping Company’s APIs that allowed him to download internal files without authentication.



August 30, 2023

API Days Connect Hong Kong

We were delighted to have the opportunity to present at Apidays Hong Kong this year. The hybrid event was a wonderful way to connect with some of the brightest minds in API security from all across the region and our CEO, Jeremy Snyder, took to the stage to deliver a talk entitled ‘API Security: Analysis of Breaches, Attack Vectors and Strategies.’ Watch the full presentation now…



August 7, 2023

Disclosure: Fast Food Delivery Service

An unauthenticated API belonging to a fast food company exposed receipts from all of its stores in India.



April 24, 2023

Crucial API Security Practices to Shield Your Sensitive Data

APIs facilitate smooth data exchange and streamline the user experience. However, developers' growing reliance on APIs has caused a rise in API cyber threats. Threats to API security can cause devastating consequences, including sensitive data breaches.



Lina Romero

Lina Romero

WhatsApp with these APIs?

LLM09: Misinformation

LLM08: Vector & Embedding Weaknesses

LLM07: System Prompt Leakage

Docker APIs Targeted

LLM06: Excessive Agency

What You Don’t Log Will Hurt You

FireTail at Black Hat USA 2025: Finalist in the Startup Spotlight

OWASP LLM Risk #5: Improper Output Handling

OneLogin, More Problems

LLM04: Data & Model Poisoning

When AI Turns Against Us

Your Mobile Apps May Not Be as Secure as You Think…

LLM03: Supply Chain

Closing the Loop: Continuous API Security Testing

An open letter to FireTail customers about security and data privacy

LLM02: Sensitive Information Disclosure

Securing AI Innovation Without Sacrificing Pace

The New CIS API Security Guide

Enhanced AI Security Capabilities from FireTail

Prompt Injection: A Deep Dive into OWASP's #1 LLM Risk

Tomcat RCE Vulnerability Now Exploited in the Wild

API Security IS AI Security

OmniGPT’s Massive Alleged Breach…

What We Can Learn from The New Malware Abusing Microsoft

AI & API: Double Rainbow for Cybersecurity

DeepSeek, Shallow Security

OpenAI? Also Open to Abuse

API Discovery: The Foundation of Security

The Secrets of APIs...

Crossbarking via Chrome Extension

Microsoft Sharepoint Vulnerability Disclosure

FireTail support for Enhanced Payload Logging For AWS API Gateway V1

FireTail Joins Wiz Integration (WIN) Platform

Disclosure: Multiple Vulnerabilities in Granicus eFiling Platform

Star Health Data Leak: The Call is Coming from Inside the House

Ecovacs Hurl Obscenities at Unsuspecting Users

Hackers Exploiting Docker Swarm, Kubernetes, & SSH Servers

Versa is Vulnerable

New Vulnerability could allow for Remote Takeover of KIAs…

Feeld Dating App API

Escalating from Reader to Contributor in Azure API Management

MoveIT Breaches have Lasting Impacts on Wisconsin Medicare

FireTail Selected for TechCrunch Disrupt’s Startup Battlefield 2024

The Challenges of API Logging

API Vulnerabilities in Solar Panel Systems

Selenium Grid Target of Malware Attack

Cloudflare’s Application Security Report

Google Cloud Security Threat Horizons Report #10

Life 360 Phone Number Leak

Apache Hugegraph Under Attack

Apple Leaks Location Data

Cuckoo for CocoaPods

MFA Breached via Unauthenticated APIs

New Cryptomining Campaigns Use Exposed Docker APIs

Google's GitHub Goof

Sensitive Meeting Data Left Vulnerable to Cyber Infiltration

When the Internet Connects to You

What CISOs Need to Know About API Security in 2024

Home Access Control APIs Leave Users in Hot Water

Vulnerabilities found in Fluent Bit Logging Tool API

Postman Delivering Secrets

Revisiting Cambridge Analytica in 2024

There's No AI Without APIs

Client Spotlight - Tidal Cloud

Disclosure: Work Application Vulnerability

FireTail at Apidays Paris 2023

Webinar: The Cyber Landscape Outlook 2024

Disclosure: Remote Data Service

Disclosure: Financial Application

FireTail at SecOps Vision for 2024

Disclosure: European Shipping Company

API Days Connect Hong Kong

Disclosure: Fast Food Delivery Service

Crucial API Security Practices to Shield Your Sensitive Data

This site uses cookies