Cybersecurity researchers uncovered a vulnerability in a popular online travel service, which could have been exploited to gain unauthorized access to users’ accounts to perform activities like booking hotels and car rentals on the victim’s behalf. Although the vulnerability has been patched and the company’s name was not disclosed, successful exploitation could have exposed millions of online airline users worldwide. The flaw was found in service-to-service interactions, a significant risk point for API supply chain attacks.
Hidden Malware and Ransomware: 6 Places to Check (+ How to Prevent It)
Cybercriminals are increasingly using sophisticated methods like ransomware and unknown viruses, going unnoticed on networks for long periods. By 2024, 59% of organizations experienced ransomware