Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency services.

Large language models are miraculous tools until the cost hits you like a city bus. Fortunately, we have a few good levers to ...

Static application security testing, or SAST, is most useful when it is close to the way your team actually writes code. That is where Semgrep becomes valuable. It can scan source code quickly, fit ...

Cache key injection can expose restricted data, disrupt websites, or poison cached pages with malicious content.

A newly documented OpenAI advertising mechanism may allow the company to associate activity on participating advertiser websites with ChatGPT user identities through a cross-site cookie, according to ...

A phishing-as-a-service (PhaaS) toolkit tracked as Mirage2FA has been linked to the potential compromise of 4,532 Microsoft 365 accounts in a campaign that targeted 3,518 organizations, according to ...

Google released version 153 of its Chrome web browser on September 9, marking the latest stable release. Key changes include new HTML ...