Blog

#security

Articles tagged security from Whatever Works.

A single glowing API gateway in a network, one door held open by a paper tag reading the example key, with a ring of provider API keys and a cloud credential badge spilling out through it

SecuritySeptember 10, 202610 min read

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Nearly 1 in 10 internet-facing LiteLLM gateways accepted the example "sk-1234" admin key straight from the setup guide. That one key can expose every stored model-provider API key and the cloud credentials behind the gateway. Here's what Wiz found, the four CVEs, and what to check on your own gateway today.

Read article →

Illustration of a WordPress site and a backup-restore archive under a warning sign, with a security shield blocking an incoming attack

FeaturedSecuritySeptember 3, 20267 min read

Patch Now: A WordPress Backup Plugin Flaw Exposes Millions of Sites to Takeover

CVE-2026-19949 is an unauthenticated SQL injection in All-in-One WP Migration and Backup that allows remote code execution. 3.25 million sites are still running a vulnerable version. Here's what it means, and the steps to secure your site today.

Read article →

Illustration of passkey sign-in: a phone approving a passkey prompt on a business website, with the password field crossed out and a signed-in checkmark

FeaturedTechnologyAugust 22, 20269 min read

Passkeys in 2026: Your Customers Already Use Them — Does Your Website Let Them In?

FIDO's 2026 report: 5 billion passkeys in use, 90% consumer awareness, and 47% of people more likely to abandon a purchase over a forgotten password. What a passkey actually is, what it costs to add, and when it's worth it for your business.

Read article →