Category - API Security Blog

Im not sure what you mean by the same.

If you mean that the two sets of data are identical, then I think this is a bad idea. The reason for this is that it will be difficult to merge changes from one set into the other if they were both be ...

August 24, 2021

Ive been using a custom-built PC for the last three years.

It is running Windows 7 and I am very happy with it. However, my main machine at home has started to show its age (and so have I). So, it was time to build a new one! For this project, I wanted somet ...

August 24, 2021

API scanning tools like Nuclei are a threat to your API security.

Nuclei is an open source API testing framework that can be used to test the availability of APIs and their resources. It was created by the team at Apiary, who also provide a hosted version of Nuclei ...

August 24, 2021

Im not going to be able to do this.

I have a lot of respect for the people who are doing it, but I dont think I can keep up with the pace that they are setting. They seem like they are having fun and enjoying themselves, which is grea ...

August 24, 2021

Im not going to tell you how to live your life, but I will say that if you are a woman who is looking for a man and the only men you know are those in your social circle (or online), then it might be time to go out and meet some new people.

You can do this by joining clubs or volunteering, or even just by moving somewhere else. If all of your friends have partners except for one person, maybe thats because she doesnt want a partner? ...

August 24, 2021

The real estate industry is constantly under attack by cyber criminals trying to intervene in ongoing transactions to intercept a large check or wire transfer.

We're a big target for a relatively small company, because we have high-value transactions relative to our size." Traceable Inc., which emerged from stealth in August, combines distributed tracing th ...

August 24, 2021

API security is a top concern for organizations, but the majority of API attacks are getting past traditional WAFs and API gateways.

The industry needs to move beyond point solutions that fail to address the full range of threats facing APIs. We need to rethink how we approach API security from development through runtime, with an ...

August 24, 2021

The API was sending a POST request to the forum without an Authorization header.

In this case, I decided to take a closer look at the API and some information in the POST data caught my attention. It was taking an ID information defined by the API (I guess) in the header of the re ...

August 24, 2021