Security

WSO2 API Manager JWT bypass sees active exploitation attempts

WSO2 API Manager JWT bypass sees active exploitation attempts Image: Primary
A critical JWT-signature verification flaw in WSO2 API Manager and related products is seeing active exploitation attempts, according to watchTowr. The flaw, CVE-2026-5430, can allow tokens signed with unsupported algorithms to bypass authentication and potentially take over administrative accounts. WatchTowr said its honeypots captured tokens with embedded administrator privileges on September 13. WSO2 has released fixes for affected products and support-subscription update levels.
Sources
The Hacker News
Published by Tech & Business, a media brand covering technology and business. This story was sourced from The Hacker News and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security
Security

Google patches exploited Pixel modem privilege flaw

Google released September security patches for Pixel devices that address 110 vulnerabilities, including CVE-2026-58704, which it said may be under limited targeted exploitation. The high-severity modem flaw can allow an attacker ...

Bleeping Computer, The Hacker News
Capital AI
Capital AI

Hang Ten Systems adds $53 million to seed funding

AI startup Hang Ten Systems has added $53 million to its seed funding, five weeks after its initial $32 million seed round, bringing total funding to $85 million. Temasek's early-stage platform Xora led the new investment, the com...

TechCrunch
Capital Products
Capital Products

iGii raises €26.49 million to scale carbon-nanomaterial production

Stirling-based advanced-materials company iGii announced €26.49 million in new funding to commercialise and expand industrial adoption of its porous carbon nanomaterial, Gii. The package includes a €13.65 million Series B led by t...

EU-Startups
Security Capital
Security Capital

Hackuity raises €16 million for vulnerability-remediation platform

Hackuity announced a €16 million funding round led by Forgepoint Capital International, bringing the Lyon-based vulnerability-operations company's total funding to €32 million. The company said it will use the capital for product ...

EU-Startups
Products Capital
Products Capital

Veridion raises €17.5 million for live business-data platform

Bucharest-based Veridion raised €17.5 million in Series A funding to expand its AI-powered business-data platform, the company said. Hoxton Ventures led the round, joined by existing investors including Underline Ventures and OTB ...

EU-Startups
Infrastructure
Infrastructure

Blue Energy begins Texas reactor application for Crusoe data center

Blue Energy Global has begun an application to install a small reactor at a Texas power plant it is developing to supply a Crusoe data center. The data center would initially run on natural gas before nuclear power is added, Bloom...

Bloomberg Technology