ClickUp, a widely used productivity and project management platform, is facing serious security concerns after a hardcoded API key exposed sensitive data linked to major enterprises and government entities. A security researcher known as @weezerOSINT discovered that ClickUp had embedded a Split.io SDK token directly inside its production JavaScript bundle. This script automatically loads whenever […] The post ClickUp Hardcoded API Key Exposes 959 Emails from Fortune 500 Giants appeared first on Cyber Security News.