Morningstar

Intruder Introduces Autoswagger: The Free Tool To Expose Hidden API Authorization Flaws

Attack Surface Management Leader Enables Organizations to Check APIs for Common and Easily Exploitable API Vulnerabilities Intruder, a leader in attack surface management, has launched Autoswagger—a ...
CSOonline

Understanding your API attack surface: How to get started

Attackers are targeting APIs with great success. Here's how to begin assessing your API attack surface and minimize your risk. We live in a world of cloud computing, mobile devices and microservices.
Security Boulevard

Everyone Knows About Broken Authorization – So Why Does It Still Work for Attackers?

Broken authorization is one of the most widely known API vulnerabilities.  It features in the OWASP Top 10, AppSec conversations, and secure coding guidelines. Broken Object Level Authorization (BOLA) ...
CSOonline

Enhancing API security: dynamic authorization to protect sensitive data

API Gateways effectively manage the authentication of the user and provide service orchestration capabilities, but if sensitive data is involved, additional fine-grained authorization capabilities are ...