Category - API Security Blog

Im not sure how to feel about the new interface.

It looks nice, but it feels like Im using a different app. I think this is going to be one of those things that you either love or hate https://t.co/iefgTsMRZ2 ...

October 20, 2021

CloudSEK discovered API security flaws impacting several apps, potentially exposing the personal and financial information of millions of consumers

CloudSEK discovered API security flaws impacting several apps, potentially exposing the personal and financial information of millions of consumers https://t.co/R1drc5USQN ...

October 20, 2021

1.

Try to bypassing by changing the content-type header of the file you are uploading. 2. Try to bypassing by adding a valid extension before the execution extension (file name) 3. Try to bypassing by ...

October 20, 2021

API4:2019: Lack of Resources and Rate Limiting A lack of resources or rate limiting can lead to a denial-of-service (DoS) attack.

A DoS attack occurs when an attacker sends more requests than the system can handle, causing it to crash or become unavailable for legitimate users. The most common way to perform a DoS attack is by s ...

October 20, 2021

The API Economy is here, get on board 1:25PM1:50PM Stage The Rise of the API-led Business Model – How to build a successful business with APIs? 1:50PM2:15PM Stage How to create an effective and sustainable Open Banking strategy for your bank? Paula DAlessandro De Oliveira, Head of Digital Transformation at KBC Group NV/SA.

KBC Bank N.V., Brussels Office, Belgium. Head of Digital Transformation since 2016. Previously she was in charge of the Innovation Lab (2014-2016) and before that she was responsible for the Mobil ...

October 20, 2021

SOAtest + OWASP ZAP = DAST for functional tests.

Parasoft SOAtest now features the ability to closely integrate dynamic application security testing (DAST) for APIs into your functional test suites, and DAST also integrates seamlessly with Parasoft ...

October 20, 2021

The most important thing to remember is that the best way to do anything in software development depends on your situation.

You can use any of these techniques, or you can combine them with each other and/or with other techniques. The key is not to get stuck in a rut where you think theres only one right way of doing thi ...

October 20, 2021

The current state of the game is that we have a working prototype, but it’s not ready for prime time.

We need to do more work on it before we can release a playable version. We're going to be doing some playtesting at PAX East this weekend and will hopefully get some useful feedback from players ther ...

October 20, 2021