API - API Security Blog

Whats wrong with automotive mobile apps?

![](https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2022/05/25084357/sl-automotive-mobile-app-990x400.jpg) ## Introduction The recent [story]() about the 19-year-old hacker who took ...

May 30, 2022

Open Automation Software OAS Platform REST API unauthenticated vulnerability

### Summary An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to ...

May 30, 2022

Undefined behavior when users supply invalid resource handles

### Impact Multiple TensorFlow operations misbehave in eager mode when the resource handle provided to them is invalid: ```python import tensorflow as tf tf.raw_ops.QueueIsClosedV2(handle=[]) ``` ```p ...

May 30, 2022

Missing validation causes denial of service via `LSTMBlockCell`

### Impact The implementation of [`tf.raw_ops.LSTMBlockCell`](https://github.com/tensorflow/tensorflow/blob/f3b9bf4c3c0597563b289c0512e98d4ce81f886e/tensorflow/core/kernels/rnn/lstm_ops.cc) does not f ...

May 30, 2022

Frida-Ios-Hook – A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjRpifhvjdd6zzAj1WZwtUY9GLC2kNMVGZqw9cwEzjrtrp3yn6eRkU5o13Y3Vh9n7-o46gZVNmnkSRiDhOC8hJZoBg6qs2o_srS86-748iiLiRYMiBfkBHAfUpnsB8ZTv_lDMoey_0ZfL2IQ-4 ...

May 30, 2022

Cross-domain cookie leakage in Guzzle

### Impact Previous version of Guzzle contain a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets th ...

May 30, 2022

Bad Bots and the Commoditization of Online Fraud

Fraudsters will stop at nothing to exploit your websites and customers, and with the accelerated shift to digital payments, [online fraud]() has never been more profitable. This shift, catalyzed by th ...

May 30, 2022

How Secrets Lurking in Source Code Lead to Major Breaches

[![Major Data Breaches](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjqzS-ZZyy0Ca3T2oA8PEVFaZKhUeDXsX-E1TQCFJRFMLvJ_ikpoYTCHjss0odds_q8wzuWQvO5TKJESQe53OfGfmQ9q7ryMcCvBVHdrrg3-Uv-AvexZ6qK ...

May 30, 2022