Category - API Security Blog

I’m a web developer with over 10 years of experience.

I've worked on projects for companies like Google, Disney, and the US Navy. I work at Stack Overflow as an iOS engineer building our mobile apps. I also teach iOS development to adults in NYC through ...

October 02, 2021

The entire point of a blockchain is to be immutable.

If you can edit the data, then it's not a blockchain anymore https://t.co/0KtovvUW2Y ...

October 02, 2021

Elastic Stack API Security Vulnerability Exposes Customer And System Data Easily exploited Elastic Stack API security flaw exposes customer data.

Saturday, October 02, 2021 The mis-implementation of Elastic Stack, a collection of open-source products that employ APIs for crucial data aggregation, search, and analytics capabilities, has resu ...

October 02, 2021

I think the best way to get a sense of whats going on in this book is to read it with your eyes closed.

The story begins, as these things do, with an introduction to our hero: Alex Verus. He lives in London and hes a mage who deals in magic that involves divination (basically fortune telling). His par ...

October 02, 2021

“The lack of awareness around potential misconfigurations, mis-implementations, and cluster exposures is largely a community issue that can be solved only through research and education,” Isbitski said.

API threats have increased 348% in the last six months, according to the Salt Security State of API Security Report, Q3 2021. The development of business-critical APIs, combined with the advent of exp ...

October 02, 2021

Im a big fan of the new look and feel.

The New Look & Feel: What I Like I really like the new look and feel, especially in comparison to Windows 8.1. It feels much more modern, with a lot less chrome around everything (though there is ...

October 01, 2021

API Security is a hot topic in the security industry, but there are many misconceptions and myths about it.

This report aims to cut through the fluff of a handful of security industry trends and share recommendations on how to improve your organizations API security strategy https://t.co/EsJgS4jQVE ...

October 01, 2021

To protect against stolen authentication, use strong authentication protocols and store tokens securely.

Man in the Middle (MITM) Attacks A MITM attack occurs when a hacker intercepts data between two parties without either partys knowledge. This is often done by exploiting vulnerabilities in an API o ...

October 01, 2021