A security flaw in the JavaScript implementation of OpenPGP.js allows threat actors to verify fake messages as if they were legitimate, essentially breaking public key cryptography.

Halo Security Now Detects API Keys and Secrets Exposed in JavaScript. New capability helps security teams find unintended exposures across their attack surface. April 25, ...