A large-scale study has revealed that websites are unintentionally exposing API keys tied to services like AWS, Stripe, and OpenAI, with most leaks traced back to publicly accessible JavaScript files.
There is currently an attack wave targeting devices with older iOS versions. Apple has commented on the effectiveness of a security feature in this context.