Server Side Request Forgery News Today

Updated: A new critical vulnerability impacting Exchange Server is being exploited in the wild.

ZeroTrusted.ai, a leading Generative AI (GenAI) security firm, today announced the release of its groundbreaking anti-AI tool designed to comprehensively address security and privacy concerns associated with Large Language Models (LLMs).

Apache fixed a vulnerability in its OfBiz enterprise resource planning (ERP) framework last month, but attackers and researchers found a way around the patch.

Major security flaws hit Microsoft, Apple, Cisco, Linux, Android and more, highlighting the need for strong patching practices.

As APIs emerge as the unsung heroes behind modern software development for their ability to accelerate innovation and streamline processes, it’s no secret or even a surprise that API security is a lingering problem that the broader cybersecurity industry has yet to fully solve. Since abandoning the use of APIs is not a viable option, organizations need to focus on building strong AppSec programs that give the teams developing with APIs, the structure and tooling to ensure connections are secur...

Monitoring platform is trusted by Cisco, Savannah River Nuclear Solutions, and others in CISA's critical infrastructure Sectors, say Synopsys researchers.

In a paper presented at a European cyber security conference today, Fabian Hagg outlined research that chained together server-to-server communications bugs and design flaws discovered in SAP NetWeaver Application Server ABAP (AS ABAP) and ABAP Platform.

The vulnerabilities comprise url formatting bypasses and an unrestricted file upload functionality in the API Management developer portal, according to cybersecurity firm Ermetic.

The vulnerabilities comprise url formatting bypasses and an unrestricted file upload functionality in the API Management developer portal, according to cybersecurity firm Ermetic.

Three vulnerabilities in the platform's API Management Service could allow access sensitive data, mount further attacks, and even hijack developer portals.