API - API Security Blog

Use of a Broken or Risky Cryptographic Algorithm in XWiki Crypto API

### Impact XWiki Crypto API will generate X509 certificates signed by default using SHA1 with RSA, which is not considered safe anymore for use in certificate signatures, due to the risk of collisions ...

May 30, 2022

SIM-based Authentication Aims to Transform Device Binding Security to End Phishing

[![SIM-based Authentication](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEi-zfsB4rnjhBjacLSSoRkFMCmejtF0fjjTUuLijysH95toqM2QiM5jZXxA9Kg7u0jY6Q5Xuxg4JqHsRMzmoB8P3fRdGfjVbRwIs0EApCxj_rsAaS2 ...

May 30, 2022

Security update for cacti, cacti-spine (moderate)

An update that solves one vulnerability and has one errata is now available. Description: This update for cacti, cacti-spine fixes the following issues: cacti-spine was updated to 1.2.20: ...

May 30, 2022

RST Threat feed. IOC: api-ai.ru

Found **api-ai[.]ru** in [RST Threat Feed](https://rstcloud.ne...Read More ...

May 30, 2022

Frida-Ios-Hook – A Tool That Helps You Easy Trace Classes, Functions, And Modify The Return Values Of Methods On iOS Platform

[![](https://blogger.googleusercontent.com/img/a/AVvXsEjRpifhvjdd6zzAj1WZwtUY9GLC2kNMVGZqw9cwEzjrtrp3yn6eRkU5o13Y3Vh9n7-o46gZVNmnkSRiDhOC8hJZoBg6qs2o_srS86-748iiLiRYMiBfkBHAfUpnsB8ZTv_lDMoey_0ZfL2IQ-4 ...

May 30, 2022

Cross-domain cookie leakage in Guzzle

### Impact Previous version of Guzzle contain a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets th ...

May 30, 2022

Bad Bots and the Commoditization of Online Fraud

Fraudsters will stop at nothing to exploit your websites and customers, and with the accelerated shift to digital payments, [online fraud]() has never been more profitable. This shift, catalyzed by th ...

May 30, 2022

How Secrets Lurking in Source Code Lead to Major Breaches

[![Major Data Breaches](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjqzS-ZZyy0Ca3T2oA8PEVFaZKhUeDXsX-E1TQCFJRFMLvJ_ikpoYTCHjss0odds_q8wzuWQvO5TKJESQe53OfGfmQ9q7ryMcCvBVHdrrg3-Uv-AvexZ6qK ...

May 30, 2022