Topic

#Api Security

Stories tagged by our AI curator.

Enterprise

Vercel moved to kill static credentials. Then developers spotted its own deployment token.

Vercel mandates vendors eliminate long-lived API keys by January 2027, pushing OIDC adoption for secure authentication, though its own deployment workflow still uses static credentials.

The New Stack6 days ago

Enterprise

Railway urges users to revoke API keys after cyberattack exposes customer secrets

Cloud platform Railway disclosed a cyberattack that exposed encrypted customer data including API keys and credentials, urging all users to revoke and replace their stored secrets.

MediaNama7 days ago