3 casos · pág. 1/1
Dropbox confirmed that roughly 5,000 customer accounts were accessed between 4 and 21 August after attackers abused a legacy login integration between Dropbox and Lenovo ID, Lenovo's identity system. Lenovo ID did not verify that a person registering an account actually controlled the email address used. Because Dropbox implicitly trusted…
Security firm V12 reported on October 22 that the x402 SDKs, an open standard for AI agents paying for API calls over HTTP 402, contained 25 flaws, three rated critical. The most notable was that the default client set no spending limit, so a malicious API could get an agent with an automatic signer to sign a payment for its full balance …
Researcher Mohan Pedhapati of Hacktron ran an AI-driven audit against vinext, Cloudflare's Next.js reimplementation reportedly built in a week with AI assistance. The scan produced 45 findings, of which 24 were manually validated, including several Critical issues. The most serious bugs allow cross-user session data leakage, shared cache …
