Issue 235: 25m loss at Kronos due to API key loss and three other API vulnerabilities
Brief
This week, we have news of four API-related security vulnerabilities, including Kronos’s $25m loss. Other vulnerabilities include a malware threat of DDoS on Docker APIs, a report on vulnerabilities on WordPress and Netflix, and an API vulnerability found in the Ray AI framework. We also have an article on why APIs are fertile ground for attackers and on protecting APIs for online retail.
Breach: Kronos suffers $25m loss involving API key loss
The most important news this week is the breach at the cryptocurrency fintech firm Kronos Research, who revealed in a post on X that they had suffered a loss estimated at $25 million. The company admitted that the breach originated with “unauthorized access to some of their API keys.” although it did not provide any further detail.