If you’re working with API Gateway and Lambda authorizers across different AWS accounts, you might encounter a common issue: stage variables are not supported in Lambda authorizer ARNs for ...

A critical authentication bypass vulnerability in the python.org release management API could have allowed attackers to impersonate administrators, potentially redirecting millions of users to ...

A critical authentication bypass vulnerability in the Python.org release management API was responsibly disclosed and patched earlier this year, potentially allowing attackers to manipulate download ...

AWS API Gateway helps teams create, secure, publish, monitor, and scale APIs for cloud applications and serverless services. Download AWS API Gateway to build, publish, monitor, and protect scalable ...

Microsoft announced a major expansion of the AI gateway capabilities in Azure API Management at Build 2026. The headline additions: a Unified Model API that lets clients speak one API format while ...

Update 6/10/26: Added details below from a new ServiceNow advisory regarding the observed activity and bug bounty submissions. ServiceNow is warning about a security incident after attackers exploited ...

Security researcher Piyush Gupta discovered that adding a trailing slash to API paths on AWS HTTP API, the newer and cheaper variant of API Gateway, could bypass Lambda authorizer authentication ...

The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The company published a new report on Monday summarizing its observations on the use of AI in the cyber ...

Every security program is betting on the same assumption: once a system is connected, the problem is solved. Open a ticket, stand up a gateway, push the data through. Done. That assumption is wrong.

Google’s new MFA requirement for the Ads API strengthens security but may require advertisers to adjust authentication workflows. Google is tightening security across its ads ecosystem, requiring ...

A production-ready serverless API that converts OCR output from consumer apps into structured, validated receipt data. The stack uses AWS API Gateway, Lambda, DynamoDB caching, and Amazon Bedrock Nova ...

Customer identity and access management (CIAM) has moved up the priority list for most product teams. The platforms teams choose directly affect how smoothly users sign up, how quickly enterprise ...