Análisis de Ataques API

Blog >

Industria

An AI Agent Didn’t Hack McKinsey. Its Exposed APIs Did.

Roey Eliyahu

March 13, 2026

The McKinsey breach wasn't caused by AI, but by an API layer that wasn't properly secured.

Industria

Por qué su WAF no lo detectó: El peligro de la doble codificación y las técnicas de evasión en la seguridad sanitaria

Eric Schwake

February 2, 2026

Los WAF son excelentes guardianes, pero no son investigadores.

Industria

Critical vLLM Flaw Exposes the Soft Underbelly of AI Infrastructure

Eric Schwake

December 5, 2025

A newly discovered critical flaw (CVE-2025-62164) in vLLM allows attackers to achieve Remote Code Execution (RCE) or crash servers simply by sending a malicious API request.

Salt Labs

Otra violación de seguridad de la API: Violación de datos de Life360

Hadar Freehling

July 26, 2024

La última brecha de API ocurrió en la plataforma Life360, donde un atacante pudo obtener 400 mil números de teléfono de usuarios.

Salt Labs

The Dell API Breach: It could have been prevented

Hadar Freehling

May 17, 2024

The API attack on Dell illustrates why API protection is so complex and why you need a tool like Salt to help.

Industria

What Can be Learned from the JumpCloud Security Incident

Nick Rago

July 27, 2023

The JumpCloud incident highlights the fact that organizations must be aware of risks in regards to their cloud service providers.

Análisis de Ataques API

Publicaciones

Blog de seguridad de Salt