Skip to main content

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication

thehackernews.com ·5h ago

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

Autonomous Trash Can Robot Testing at Shinjuku Station

East Japan Railway Co. (JR East) is currently conducting a test for an autonomous robot that serves the purpose of a mobile trash can at Shinjuku Station in Tokyo through late November.

5h ago ·japannews.yomiuri.co.jp

I bought Instagram's new Meta One subscription — here's what $7.99 actually gets you

Meta just launched Meta One, a new subscription for Instagram, Facebook and WhatsApp that gives you access to more AI features. Here's what's still free and what you'll have to pay for.

5h ago ·tomsguide.com

HTTP/HTTPS Malleable C2: The Chameleon of Network Communications

Author: @cyberrscourse | Cybersecurity Education & Research Published: September 16, 2026 ⚠️ LEGAL WARNING: The techniques described in this article are for educational purposes only.

Malleable C2 disguises communication as regular web traffic using HTTP/HTTPS.
Altered patterns mimic Google Analytics or jQuery CDN requests to blend in.
Detection techniques include behavioral analysis, JA3/JA4 fingerprinting, and network flow analysis.

5h ago ·dev.to

Cyberattack forces International Meteor Organization to rebuild digital systems

A cyberattack has disrupted the digital infrastructure of the International Meteor Organization (IMO), leaving most of the organisation’s website offline read more Cyberattack forces International…

5h ago ·businessday.ng

I just found this $8 door hack that could stop heat escaping and cut my energy bills this fall

The cold weather is descending, and with that, our heating bills shoot up. Here's a simple and affordable hack that could help keep those costs low while still keeping your home warm.

5h ago ·tomsguide.com

SK Hynix in talks with Intel about deal to make memory chips in the US for the first time, sources say

SEOUL/WASHINGTON: South Korea's SK Hynix is in talks with Intel about a deal that would see it manufacture memory chips on US soil for the first time, three people familiar with the discussions said.

5h ago ·nst.com.my

More from Wednesday 16 September →