Análise de Vulnerabilidades de API

A Cadeia de Suprimentos de IA é, na verdade, uma Cadeia de Suprimentos de API: Lições da Violação do LiteLLM

April 10, 2026

O elo mais fraco na IA corporativa não é necessariamente o próprio modelo. É o middleware que conecta os modelos aos seus dados.

Indústria

React2Shell: The Frontend Vulnerability That Unlocks Your Internal APIs

Eric Schwake

December 10, 2025

The cybersecurity world is currently buzzing about React2Shell (CVE-2025-55182), a critical remote code execution (RCE) vulnerability affecting React and Next.js.

Indústria

Anatomia de uma Ameaça Moderna: Desvendando a Vulnerabilidade MCP do Figma

Eric Schwake

October 9, 2025

Embora poderosos, os servidores MCP criam novos caminhos, muitas vezes não monitorizados, para aplicações corporativas sensíveis.

Indústria

CISO Alert: Lessons from McDonald’s Chatbot Breach

Eric Schwake

July 14, 2025

McDonald’s AI-powered chatbot exposes the personal information of over 64 million people.

Salt Labs

Supply Chain API Attacks: Account Takeover Vulnerability Puts Millions of Airline Users at Risk

Amit Elbirt

January 28, 2025

Salt Labs has identified an account takeover vulnerability in a popular online top-tier travel service for hotel and car rentals.

Salt Labs

Security Flaws within ChatGPT Ecosystem Allowed Access to Accounts On Third-Party Websites and Sensitive Data

Aviad Carmel

March 13, 2024

Salt Labs researchers identified generative AI ecosystems as a new interesting attack vector. vulnerabilities found during this research on ChatGPT ecosystem could have granted access to accounts of users, including GitHub repositories, including 0-click attacks.

Análise de Vulnerabilidades de API

Posts

Blog da Salt Security