All InfoSec / Cybersecurity News from API Security News | allinfosecnews.com

Latest
Top

Issue 229: Incidents with DuoLingo and JumpCloud, FastAPI for APIs, and five best practices 5 days, 16 hours ago | apisecurity.io

api api keys apis api security +15

Issue 228: 3rd party API security, OAuth2 step-up deep-dive, shadow and zombie APIs 2 weeks, 5 days ago | apisecurity.io

api apis api security article +16

Issue 227: GhostToken on Google Cloud, Gartner on zero trust, API authentication 1 month ago | apisecurity.io

api api authentication api security articles +16

Issue 226 : Jetpack WordPress plugin has API vulnerability, how to address API security in … 1 month, 2 weeks ago | apisecurity.io

address api api security api vulnerability +13

Issue 225 : API security needs a reset, vAPI walkthrough, five stages to attain API … 2 months ago | apisecurity.io

api api security article code +15

Issue 224 : API security is critical in 2023, API contract testing, and Fencer security … 2 months, 2 weeks ago | apisecurity.io

api api security api security testing article +12

Issue 223 : Becoming an API security expert, AI for API hackers, building API cross-functional … 3 months ago | apisecurity.io

api api security article artificial +15

Issue 222: Attackers exploiting APIs faster than ever, DVGA walkthrough, Twitter outage 3 months, 2 weeks ago | apisecurity.io

api apis application attackers +13

Issue 221: Credential leakage fueling API breaches, API gateway security, PCI DSS 4 impact on … 3 months, 3 weeks ago | apisecurity.io

api api gateway api gateway security apis +15

Issue 220: API flaw in Booking.com, apps leaking sensitive API data, API security testing checklist 4 months ago | apisecurity.io

api api security api security testing approov +28

Issue 219: Money Lover app exposes user data, most web API flaws missed by standard … 4 months, 2 weeks ago | apisecurity.io

access api app article +17

Issue 218: Three Argo CD API exploits, distributed identity for modern API security 4 months, 3 weeks ago | apisecurity.io

api api security api vulnerabilities argo +21

Issue 217: Wordle API exposes answers, Twitter API breach updates, AWS exposed dangerous API 4 months, 4 weeks ago | apisecurity.io

api api security aws breach +17

Issue 216: Hacking a .Net application, state of API security report, myths of API security 5 months, 4 weeks ago | apisecurity.io

api api design api security application +17

Issue 216: Hacking a .Net application, state of API security report, myths of API security 5 months, 4 weeks ago | apisecurity.io

api api design api security application +17

Issue 215: API flaws in Lego marketplace, API style guides, 42Crunch joins MISA 6 months, 3 weeks ago | apisecurity.io

42crunch account account takeover api +15

Issue 214: Google Cloud’s four pillars of API security, Cerbos for API permissions, attacking predictable … 7 months, 2 weeks ago | apisecurity.io

api apis api security article +14

Issue 213: Supply chain vulnerability in IBM Cloud, hardcoded API keys in Algolia portal, JSON-based … 8 months ago | apisecurity.io

algolia api api keys attacks +21

Issue 212: Remote control of vehicles, API hacking for QA teams, API Top 10 walkthrough 8 months, 1 week ago | apisecurity.io

api api hacking api vulnerability articles +21

Issue 211: SQLi vulnerability in Zendesk Explore, Twitter API vulnerability, API threats to data-driven enterprises 9 months, 2 weeks ago | apisecurity.io

api data data-driven enterprises +7

Issue 210: CSRF vulnerability in F5, supply chain attacks, hacking APIs, GCP API security report 9 months, 3 weeks ago | apisecurity.io

api apis api security attacks +11

Issue 209: CSRF in Plesk API-enabled server, top five API security myths, Ory Hydra authentication … 10 months, 1 week ago | apisecurity.io

api api security authentication csrf +5

Issue 208: Urlscan.io leaks sensitive data, Dropbox phishing attack, contract test for microservices 10 months, 2 weeks ago | apisecurity.io

attack contract data dropbox +9

Issue 207: Tinder API gateway, runtime secrets protection for mobile APIs, and Open Banking APIs 10 months, 3 weeks ago | apisecurity.io

api api gateway apis banking +9

Issue 205: Manufacturing industry seeing more API incidents than other industries, two guides on developing … 11 months ago | apisecurity.io

api apis incidents industry +4

Issue 204: API attacks on shadow APIs, PII leaks from e-commerce APIs, API runtime security 11 months, 1 week ago | apisecurity.io

api api attacks apis attacks +9

Issue 203: Optus data breach, API security guide, AuthN/AuthZ vulnerabilities 11 months, 2 weeks ago | apisecurity.io

api api security authz breach +8

Issue 202: Six top API security risks, why APIs have no clothes, and a guide … 1 year ago | apisecurity.io

api apis api security api security testing +8

Issue 201: API security in Kubernetes, Corey Ball podcast, broken access controls for APIs, 200th … 1 year ago | apisecurity.io

access access controls api apis +7

Issue 200: Injection vulnerability in BitBucket, OAuth2 exploitation, and 200th issue prize giveaways 1 year ago | apisecurity.io

bitbucket exploitation injection newsletter archive +2

Issue 199: Vulnerability in Zulip server, broken access controls threat to APIs, introduction to BOLA 1 year, 1 month ago | apisecurity.io

access access controls apis bola +5

Issue 198: API security certification, API authentication webinar, optimizing API security 1 year, 1 month ago | apisecurity.io

api api authentication api security authentication +4

Issue 197: Apps leaking Twitter tokens, parameter smuggling attack in Golang, API catalogs for security 1 year, 1 month ago | apisecurity.io

api apps attack golang +6

Issue 196: Software supply chains, APIs in healthcare, Azure API management baselines 1 year, 1 month ago | apisecurity.io

api api management apis azure +8

Issue 195: How DevOps teams defend against API attacks, empathy for the API developer 1 year, 1 month ago | apisecurity.io

api api attacks attacks developer +4

Issue 194: API testing checklist, API security testing resources, CVSS for API security 1 year, 2 months ago | apisecurity.io

api api security api security testing api testing +7

Issue 193: Five API security best practices, AppSec tools for APIs 1 year, 2 months ago | apisecurity.io

api apis api security appsec +5

Issue 192: Vulnerable APIs costing $75 billion, new Google API security platform 1 year, 2 months ago | apisecurity.io

api apis api security api security platform +5

Issue 191: API insecurity causing rising incidents, policy-as-code for API security 1 year, 2 months ago | apisecurity.io

api api insecurity api security code +6

Issue 190: Akamai’s report on APIs, API security checklist, dangers of API security overconfidence 1 year, 3 months ago | apisecurity.io

akamai api apis api security +5

Issue 189: Vulnerability in Travis CI log API, Microsoft guide to API security, and why … 1 year, 3 months ago | apisecurity.io

api api security attention guide +8

Issue 188: API security for smart cars, ownership of the API lifecycle, APIs a top … 1 year, 3 months ago | apisecurity.io

api apis api security cars +7

Issue 187: RCE and API vulnerability in OAS platform, account takeover in Yunmai smart scale 1 year, 3 months ago | apisecurity.io

account account takeover api newsletter archive +7

Issue 186: Kubernetes API servers exposed, vulnerability in Swagger-UI library, Google views on API economy 1 year, 4 months ago | apisecurity.io

api economy exposed google +6

Issue 185: Three trends in API security, GraphQL securing risks, the importance of API discovery 1 year, 4 months ago | apisecurity.io

api api discovery api security discovery +5

Issue 184: RCE in F5 BIG-IP suite, API security maturity, hardening GCP implementations 1 year, 4 months ago | apisecurity.io

api api security big big-ip +6

Issue 183: API vulnerability in VeryFitPro, exposed Docker APIs targeted by botnets, TruffleHog finds stored … 1 year, 4 months ago | apisecurity.io

api apis botnets credentials +6

Issue 182: Drupal patches API vulnerability, Google Cloud on API security challenges, guide to OAuth2 1 year, 4 months ago | apisecurity.io

api api security challenges cloud +9

Webinar – Actively Monitor and Defend Your APIs with 42Crunch and the Azure Sentinel Platform 1 year, 4 months ago | apisecurity.io

42crunch apis azure azure sentinel +5

Issue 181: Vulnerability in Wavlink router, API exposing system passwords, views on internal APIs 1 year, 5 months ago | apisecurity.io

api apis exposing internal +5

Issue 180: API vulnerability in Easy!Appointments platform, new APIs compromising security 1 year, 5 months ago | apisecurity.io

api apis appointments newsletter archive +3

Issue 179: Spring4Shell zero-day, CRI-O container runtime vulnerability, and REST API security reference 1 year, 5 months ago | apisecurity.io

api api security container newsletter archive +8

Issue 178: Six areas for Cloud-native security, API governance, DevOps for improved API security, locking … 1 year, 5 months ago | apisecurity.io

api apis api security cloud +7

Issue 177: Vulnerabilities in Veeam product, RCE in Parse Server module, insecure API threat to … 1 year, 6 months ago | apisecurity.io

api apps insecure mobile +8

Webinar – OWASP API Security Top 10 Challenges – Third and Final Episode 1 year, 6 months ago | apisecurity.io

api api security challenges newsletter archive +5

Issue 176: Case study of API vulnerabilities, Riverbed vulnerability, API abuse, JWT safety 1 year, 6 months ago | apisecurity.io

abuse api api abuse api vulnerabilities +8

Issue 175: Vulnerabilities affecting Cisco platforms, GitLab instances, and campus access control 1 year, 6 months ago | apisecurity.io

access access control campus cisco +5

Webinar: How to Extend Protection of your Data from API to Mobile Application 1 year, 6 months ago | apisecurity.io

api application data mobile +3

Issue 174: APIs increasingly used for account takeover, API hacking book, OAuth in Postman 1 year, 6 months ago | apisecurity.io

account account takeover api api hacking +7

Issue 173: Coinbase vulnerability, AuthN/AuthZ best practices, bad bots, Elgato Key light hack 1 year, 7 months ago | apisecurity.io

authz bad bad bots best practices +7

Issue 229: Incidents with DuoLingo and JumpCloud, FastAPI for APIs, and five best practices 5 days, 16 hours ago | apisecurity.io

api api keys apis api security +15

Items published with this topic over the last 90 days.

Latest

Issue 229: Incidents with DuoLingo and JumpCloud, FastAPI for APIs, and five best practices 5 days, 16 hours ago | apisecurity.io

api api keys apis api security +15

Issue 228: 3rd party API security, OAuth2 step-up deep-dive, shadow and zombie APIs 2 weeks, 5 days ago | apisecurity.io

api apis api security article +16

Issue 227: GhostToken on Google Cloud, Gartner on zero trust, API authentication 1 month ago | apisecurity.io

api api authentication api security articles +16

Issue 226 : Jetpack WordPress plugin has API vulnerability, how to address API security in … 1 month, 2 weeks ago | apisecurity.io

address api api security api vulnerability +13

Issue 225 : API security needs a reset, vAPI walkthrough, five stages to attain API … 2 months ago | apisecurity.io

api api security article code +15

Issue 224 : API security is critical in 2023, API contract testing, and Fencer security … 2 months, 2 weeks ago | apisecurity.io

api api security api security testing article +12

Issue 223 : Becoming an API security expert, AI for API hackers, building API cross-functional … 3 months ago | apisecurity.io

api api security article artificial +15

Issue 222: Attackers exploiting APIs faster than ever, DVGA walkthrough, Twitter outage 3 months, 2 weeks ago | apisecurity.io

api apis application attackers +13

Issue 221: Credential leakage fueling API breaches, API gateway security, PCI DSS 4 impact on … 3 months, 3 weeks ago | apisecurity.io

api api gateway api gateway security apis +15

Issue 220: API flaw in Booking.com, apps leaking sensitive API data, API security testing checklist 4 months ago | apisecurity.io

api api security api security testing approov +28

Issue 219: Money Lover app exposes user data, most web API flaws missed by standard … 4 months, 2 weeks ago | apisecurity.io

access api app article +17

Issue 218: Three Argo CD API exploits, distributed identity for modern API security 4 months, 3 weeks ago | apisecurity.io

api api security api vulnerabilities argo +21

Issue 217: Wordle API exposes answers, Twitter API breach updates, AWS exposed dangerous API 4 months, 4 weeks ago | apisecurity.io

api api security aws breach +17

Issue 216: Hacking a .Net application, state of API security report, myths of API security 5 months, 4 weeks ago | apisecurity.io

api api design api security application +17

Issue 216: Hacking a .Net application, state of API security report, myths of API security 5 months, 4 weeks ago | apisecurity.io

api api design api security application +17

Issue 215: API flaws in Lego marketplace, API style guides, 42Crunch joins MISA 6 months, 3 weeks ago | apisecurity.io

42crunch account account takeover api +15

Issue 214: Google Cloud’s four pillars of API security, Cerbos for API permissions, attacking predictable … 7 months, 2 weeks ago | apisecurity.io

api apis api security article +14

Issue 213: Supply chain vulnerability in IBM Cloud, hardcoded API keys in Algolia portal, JSON-based … 8 months ago | apisecurity.io

algolia api api keys attacks +21

Issue 212: Remote control of vehicles, API hacking for QA teams, API Top 10 walkthrough 8 months, 1 week ago | apisecurity.io

api api hacking api vulnerability articles +21

Issue 211: SQLi vulnerability in Zendesk Explore, Twitter API vulnerability, API threats to data-driven enterprises 9 months, 2 weeks ago | apisecurity.io

api data data-driven enterprises +7

Issue 210: CSRF vulnerability in F5, supply chain attacks, hacking APIs, GCP API security report 9 months, 3 weeks ago | apisecurity.io

api apis api security attacks +11

Issue 209: CSRF in Plesk API-enabled server, top five API security myths, Ory Hydra authentication … 10 months, 1 week ago | apisecurity.io

api api security authentication csrf +5

Issue 208: Urlscan.io leaks sensitive data, Dropbox phishing attack, contract test for microservices 10 months, 2 weeks ago | apisecurity.io

attack contract data dropbox +9

Issue 207: Tinder API gateway, runtime secrets protection for mobile APIs, and Open Banking APIs 10 months, 3 weeks ago | apisecurity.io

api api gateway apis banking +9

Issue 205: Manufacturing industry seeing more API incidents than other industries, two guides on developing … 11 months ago | apisecurity.io

api apis incidents industry +4

Issue 204: API attacks on shadow APIs, PII leaks from e-commerce APIs, API runtime security 11 months, 1 week ago | apisecurity.io

api api attacks apis attacks +9

Issue 203: Optus data breach, API security guide, AuthN/AuthZ vulnerabilities 11 months, 2 weeks ago | apisecurity.io

api api security authz breach +8

Issue 202: Six top API security risks, why APIs have no clothes, and a guide … 1 year ago | apisecurity.io

api apis api security api security testing +8

Issue 201: API security in Kubernetes, Corey Ball podcast, broken access controls for APIs, 200th … 1 year ago | apisecurity.io

access access controls api apis +7

Issue 200: Injection vulnerability in BitBucket, OAuth2 exploitation, and 200th issue prize giveaways 1 year ago | apisecurity.io

bitbucket exploitation injection newsletter archive +2

Issue 199: Vulnerability in Zulip server, broken access controls threat to APIs, introduction to BOLA 1 year, 1 month ago | apisecurity.io

access access controls apis bola +5

Issue 198: API security certification, API authentication webinar, optimizing API security 1 year, 1 month ago | apisecurity.io

api api authentication api security authentication +4

Issue 197: Apps leaking Twitter tokens, parameter smuggling attack in Golang, API catalogs for security 1 year, 1 month ago | apisecurity.io

api apps attack golang +6

Issue 196: Software supply chains, APIs in healthcare, Azure API management baselines 1 year, 1 month ago | apisecurity.io

api api management apis azure +8

Issue 195: How DevOps teams defend against API attacks, empathy for the API developer 1 year, 1 month ago | apisecurity.io

api api attacks attacks developer +4

Issue 194: API testing checklist, API security testing resources, CVSS for API security 1 year, 2 months ago | apisecurity.io

api api security api security testing api testing +7

Issue 193: Five API security best practices, AppSec tools for APIs 1 year, 2 months ago | apisecurity.io

api apis api security appsec +5

Issue 192: Vulnerable APIs costing $75 billion, new Google API security platform 1 year, 2 months ago | apisecurity.io

api apis api security api security platform +5

Issue 191: API insecurity causing rising incidents, policy-as-code for API security 1 year, 2 months ago | apisecurity.io

api api insecurity api security code +6

Issue 190: Akamai’s report on APIs, API security checklist, dangers of API security overconfidence 1 year, 3 months ago | apisecurity.io

akamai api apis api security +5

Issue 189: Vulnerability in Travis CI log API, Microsoft guide to API security, and why … 1 year, 3 months ago | apisecurity.io

api api security attention guide +8

Issue 188: API security for smart cars, ownership of the API lifecycle, APIs a top … 1 year, 3 months ago | apisecurity.io

api apis api security cars +7

Issue 187: RCE and API vulnerability in OAS platform, account takeover in Yunmai smart scale 1 year, 3 months ago | apisecurity.io

account account takeover api newsletter archive +7

Issue 186: Kubernetes API servers exposed, vulnerability in Swagger-UI library, Google views on API economy 1 year, 4 months ago | apisecurity.io

api economy exposed google +6

Issue 185: Three trends in API security, GraphQL securing risks, the importance of API discovery 1 year, 4 months ago | apisecurity.io

api api discovery api security discovery +5

Issue 184: RCE in F5 BIG-IP suite, API security maturity, hardening GCP implementations 1 year, 4 months ago | apisecurity.io

api api security big big-ip +6

Issue 183: API vulnerability in VeryFitPro, exposed Docker APIs targeted by botnets, TruffleHog finds stored … 1 year, 4 months ago | apisecurity.io

api apis botnets credentials +6

Issue 182: Drupal patches API vulnerability, Google Cloud on API security challenges, guide to OAuth2 1 year, 4 months ago | apisecurity.io

api api security challenges cloud +9

Webinar – Actively Monitor and Defend Your APIs with 42Crunch and the Azure Sentinel Platform 1 year, 4 months ago | apisecurity.io

42crunch apis azure azure sentinel +5

Issue 181: Vulnerability in Wavlink router, API exposing system passwords, views on internal APIs 1 year, 5 months ago | apisecurity.io

api apis exposing internal +5

Issue 180: API vulnerability in Easy!Appointments platform, new APIs compromising security 1 year, 5 months ago | apisecurity.io

api apis appointments newsletter archive +3

Issue 179: Spring4Shell zero-day, CRI-O container runtime vulnerability, and REST API security reference 1 year, 5 months ago | apisecurity.io

api api security container newsletter archive +8

Issue 178: Six areas for Cloud-native security, API governance, DevOps for improved API security, locking … 1 year, 5 months ago | apisecurity.io

api apis api security cloud +7

Issue 177: Vulnerabilities in Veeam product, RCE in Parse Server module, insecure API threat to … 1 year, 6 months ago | apisecurity.io

api apps insecure mobile +8

Webinar – OWASP API Security Top 10 Challenges – Third and Final Episode 1 year, 6 months ago | apisecurity.io

api api security challenges newsletter archive +5

Issue 176: Case study of API vulnerabilities, Riverbed vulnerability, API abuse, JWT safety 1 year, 6 months ago | apisecurity.io

abuse api api abuse api vulnerabilities +8

Issue 175: Vulnerabilities affecting Cisco platforms, GitLab instances, and campus access control 1 year, 6 months ago | apisecurity.io

access access control campus cisco +5

Webinar: How to Extend Protection of your Data from API to Mobile Application 1 year, 6 months ago | apisecurity.io

api application data mobile +3

Issue 174: APIs increasingly used for account takeover, API hacking book, OAuth in Postman 1 year, 6 months ago | apisecurity.io

account account takeover api api hacking +7

Issue 173: Coinbase vulnerability, AuthN/AuthZ best practices, bad bots, Elgato Key light hack 1 year, 7 months ago | apisecurity.io

authz bad bad bots best practices +7

Top (last 7 days)

Issue 229: Incidents with DuoLingo and JumpCloud, FastAPI for APIs, and five best practices 5 days, 16 hours ago | apisecurity.io

api api keys apis api security +15

Business Information Security Officer

@ Metrolink | Los Angeles, CA

View on infosec-jobs.com

Senior Security Engineer

@ Freedom of the Press Foundation | Remote, 4 hour time zone overlap with New York City

View on infosec-jobs.com

Security Engineer

@ ChartMogul | Remote, EU

View on infosec-jobs.com

Elastic Consultant - EMEA

@ Elasticsearch | Germany

View on infosec-jobs.com

Software Development Engineer, Security

@ Binance | Romania, Bucharest

View on infosec-jobs.com

Digital Network Exploitation Analyst III

@ Aperio Global, LLC | Fort Meade, Maryland, United States

View on infosec-jobs.com