Mercedes-Benz accidentally exposed a trove of internal data after leaving a private key ... that the company “revoked the respective API token and removed the public repository immediately.” ...

A scan of billions of files from 13 percent of all GitHub public repositories over a period of six months has revealed that over 100,000 repos have leaked API tokens and cryptographic keys ...

Learn More API vulnerabilities are a serious ... found that 53% have experienced a data breach to networks or apps due to compromised API tokens. The report also found that organizations are ...

Those access tokens could be used, in theory, to launch applications and web sites that use the Facebook single sign on API, as well as to run queries against Facebook's "Graph" database as the user.

Heroku has now revealed that the stolen GitHub integration OAuth tokens from last month further led to the compromise of an internal customer database ... invalidate all API access tokens and ...