Bruno Surpasses 4 Million Developers, Wins API World 2026 Award for Best in API Developer Experience

Bruno, the open-source API client built around a local-first, file-based architecture, today announced it has surpassed 4 ...
InfoWorld

GitHub’s public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...
Bleeping Computer

GitHub now can auto-block token and API key leaks for all repos

GitHub is now automatically blocking the leak of sensitive information like API keys and access tokens for all public code repositories. Today's announcement comes after the company introduced push ...
ZDNet

Over 100,000 GitHub repos have leaked API or cryptographic keys

Roku TV vs Fire Stick Galaxy Buds 3 Pro vs Apple AirPods Pro 3 M5 MacBook Pro vs M4 MacBook Air Linux Mint vs Zorin OS 4 quick steps to make your Android phone run like new again How much RAM does ...
The Next Web

Grok Build was uploading entire Git repositories to xAI’s cloud, including committed secrets

A researcher proved Grok Build CLI sent full repos, 27,800x more data than the task needed, to a Google Cloud bucket. xAI had said no code was transmitted.
Krebs on Security

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

Philippe Caturegli, “chief hacking officer” at the security consultancy Seralys, was the first to publicize the leak of credentials for an x.ai application programming interface (API) exposed in the ...
SecurityWeek

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.