Category: Mix

Attackers Abuse TikTok and Instagram APIs — API Security
22
May
2025

Attackers Abuse TikTok and Instagram APIs — API Security

It must be the season for API security incidents. Hot on the heels of a developer leaking an API key…

Mapping the Future of AI Security
22
May
2025

Mapping the Future of AI Security

AI security is one of the most pressing challenges facing the world today. Artificial intelligence is extraordinarily powerful, and, especially…

Elevate your testing with Burp AI: watch Clint Gibler’s exclusive interview with PortSwigger’s Dafydd Stuttard and James Kettle
21
May
2025

Elevate your testing with Burp AI: watch Clint Gibler’s exclusive interview with PortSwigger’s Dafydd Stuttard and James Kettle

Amelia Coen | 21 May 2025 at 07:54 UTC AI is transforming Application Security, and PortSwigger is leading the charge….

CREST Accreditation Reinforces Intigriti’s Pentesting Excellence
20
May
2025

CREST Accreditation Reinforces Intigriti’s Pentesting Excellence

Intigriti, a global crowdsourced security provider, is delighted to announce that it is now CREST accredited. CREST, a globally recognised…

19
May
2025

Hive Five 224 – Happiest Country on Earth

Most tech tends to isolate us, but let’s not forget how crucial real-world experiences are. I just got back from…

CORS Misconfigurations: Advanced Exploitation Guide
18
May
2025

CORS Misconfigurations: Advanced Exploitation Guide

CORS misconfiguration vulnerabilities are a highly underestimated vulnerability class. With an impact ranging from sensitive information disclosure to facilitating SSRF…

[tl;dr sec] #279 - Security for High Velocity Engineering, Cloud Incident Readiness, AI-powered Malware Implants
15
May
2025

[tl;dr sec] #279 – Security for High Velocity Engineering, Cloud Incident Readiness, AI-powered Malware Implants

I hope you’ve been doing well! I’m absolutely thrilled to share a new guest post from my friend Jason Chan….

Developer Leaks API Key for Private Tesla, SpaceX LLMs — API Security
15
May
2025

Developer Leaks API Key for Private Tesla, SpaceX LLMs — API Security

In AI, as with so many advancing technologies, security often lags innovation. The xAI incident, during which a sensitive API…

a first step to a more centralized approach
14
May
2025

a first step to a more centralized approach

We’re pleased to share a significant new change to our platform for companies.  Our goal is to empower our customers…

What's new in Burp Suite Professional: A year of innovation | Blog
14
May
2025

What’s new in Burp Suite Professional: A year of innovation | Blog

Eleanor Clarke | 14 May 2025 at 08:26 UTC Over the past year, we’ve been hard at work making Burp…

A practitioner’s guide to classifying every asset in your attack surface
13
May
2025

A practitioner’s guide to classifying every asset in your attack surface

TLDR: This article details methods and tools (from DNS records and IP addresses to HTTP analysis and HTML content) that…

12
May
2025

Hive Five 223 – Career Dreamer

I just returned from a whirlwind weekend trip to New York with my family, and let me tell you, it…