Category - API Security Blog

The idea of a cure for homosexuality is not supported by the evidence.

The American Psychological Association, in their Fact Sheet on Sexual Orientation and Youth: There is no consensus among scientists about the exact reasons that an individual develops a heterosexual, ...

August 17, 2021

If you are using a web framework, make sure it is configured securely.

If not, use the security headers provided by your application server. Dont send verbose error messages to users. Instead of sending an error message with stack traces and other information about th ...

August 17, 2021

Verbose error messages can leak information about the server, such as the version of the underlying database structure.

Misconfigured HTTP headers allow attackers to exfiltrate data or perform common web attacks on users. CORS misconfiguration allows attackers to steal sensitive information from an applications users ...

August 17, 2021

I’m a podcast junkie.

I listen to podcasts every day while driving, working out and doing chores around the house. The following is a list of my favorite podcasts that I listen to on a regular basis. Some are tech related, ...

August 17, 2021

Im a software engineer with experience in both front-end and back-end development.

I like to work on interesting projects that solve real problems, and Im looking for new opportunities. I have over eight years of professional programming experience, including four years as a full ...

August 17, 2021

Im a software engineer with a passion for building great products.

I like to build things that are simple, useful and beautiful https://t.co/9P1qYliLrj ...

August 17, 2021

72% of mid-to-large companies admit to having suffered at least one security breach caused by an application vulnerability in the last 12 months.

@CudaWAFmanCLICK TO TWEET The shift to remote working since the Covid-19 lockdowns and the difficulties this has posed for organisations has amplified the opportunities for application-based cyberatt ...

August 17, 2021

If you’re a security professional, chances are that at some point in your career, you’ve been asked to “just add an API” to an application.

But as we all know, adding APIs can be tricky business. This article is the first of a two-part series on how to build secure APIs for your applications and services. In this installment, I'll cover ...

August 17, 2021