Category - API Security Blog

I’m not saying that you have to be a jerk.

I'm just saying that if you want to get good at something, it's probably worth being a little bit of an asshole for awhile. The other thing is this: the people who are most successful at getting what ...

September 08, 2021

APIs are a huge attack surface, and theyre often overlooked during security assessments.

Corey Ball: You can design an API you think is ultra-secure, but if you dont test it, then a cybercriminal somewhere is going to do it for you. You need to be able to scan your APIs - and this mea ...

September 08, 2021

I am a big fan of this book.

I think it is an excellent resource for anyone who wants to learn more about the history of science and how we know what we know. Its not just about physics, but also chemistry, biology, geology, as ...

September 07, 2021

If you pick a random GraphQL framework and run it with default settings in production, disaster is waiting to happen.

2. The GraphQL Schema# The schema defines the structure of your API, including all possible queries and mutations that can be executed against it. It's also used by the client-side library to generat ...

September 07, 2021

SoundCloud’s API was vulnerable to DoS attacks.

On the other hand, SoundCloud's API had no rate-limiting mechanism for some endpoints such as /me/following and /me/followers . This means that an attacker could have followed or unfollowed any number ...

September 07, 2021

Im a software engineer with experience in both front-end and back-end development.

I have worked on several projects, including an online game (with over 100k users), a social network for gamers, and various other web applications. I am currently working as the lead developer at The ...

September 07, 2021

The Mayhem for Code and Mayhem for API products are now available.

Mayhem is an automated security testing solution that finds vulnerabilities in code, APIs, and microservices. It's the first product to combine fuzzing with random testing to find bugs that other tool ...

September 07, 2021

Were excited to announce that we have released the first version of our new API Gateway, which adds a number of new features and enhancements.

In addition to being able to create custom APIs from scratch, you can now use the gateway as an API proxy for existing RESTful web services. This allows you to add authentication and authorization cap ...

September 07, 2021