Google Ads API to require multi-factor authentication

Google’s new MFA requirement for the Ads API strengthens security but may require advertisers to adjust authentication ...

Vercel Confirms Major Security Incident as Hacker Claims $2M Ransom Demand

Vercel confirms a security incident after a threat actor claims internal access and demands a $2M ransom, raising concerns ...
Bleeping Computer

New Mirai campaign exploits RCE flaw in EoL D-Link routers

A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
CoinDesk

Hack at Vercel sends crypto developers scrambling to lock down API keys

Breach tied to compromised AI tool may have exposed credentials used by app frontends, the user-facing layer that connects ...

OpenAI launches Trusted Access for Cyber program

OpenAI launches Trusted Access for Cyber, expanding vetted GPT-5.4-Cyber access and $10M API credits for defenders.
CSOonline

Microsoft issues out-of-band patch for critical security flaw in update to ASP.NET Core

Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...
Biometric Update

Idenfy launches MCP server to bring live API docs into AI assistants

Model context protocol server lets AI assistant tools like ChatGPT and Claude pull current API data to generate accurate code ...
Hackaday

This Week In Security: Docker Auth, Windows Tools, And A Very Full Patch Tuesday

CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...