The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.

Your Monday cybersecurity recap covers the latest digital threats, exposed weaknesses, active attacks, and security stories ...

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

The Eclipse Foundation has released the final version of GlassFish 8, an update of its enterprise Java application server. The new release serves as a compatible implementation of the Jakarta EE 11 ...

Ever tried updating a security library across fifty different microservices on a Friday afternoon? It is a nightmare that usually ends in someone missing a patch and a massive headache for the ...

Quick Summary Looking to ensure the reliability and performance of your APIs across complex applications? Discover the top 7 API automation testing tools for software developers in 2026 that help ...

The Databricks SDK for Java includes functionality to accelerate development with Java for the Databricks Lakehouse. It covers all public Databricks REST API operations. The SDK's internal HTTP client ...

The vulnerability is CVE-2025-24813, and was revealed on March 10 along with updates to close the hole in the open source web server software. According to API security shop Wallarm, an exploit for ...

Implementing API authentication is one of the most critical stages of API design and development. Properly implemented authentication protects data, user privacy, and other resources while ...