DEV Community

#apisecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
HTTP Message Signatures need a canonical request, not a collection of headers
jeffreyciend profile

HTTP Message Signatures need a canonical request, not a collection of headers

#http #messagesignatures #apisecurity
Comments
3 min read
Northflank Breach Exposes AI API Keys
randomchaos profile
RC

Northflank Breach Exposes AI API Keys

#northflank #apisecurity #aiinfrastructure
Comments
3 min read
API Returns Too Much Data? The Window Envelope Call
blixwerk_7cdf1919283d2fab profile

API Returns Too Much Data? The Window Envelope Call

#apisecurity #checklist #codereview #express
Comments
4 min read
Traefik dashboard discovery should start with the insecure API setting
facilishz profile

Traefik dashboard discovery should start with the insecure API setting

#zoomeye #traefik #dashboard #apisecurity
Comments
3 min read
Asked to Review API Security, Don't Know Where to Start?
blixwerk_7cdf1919283d2fab profile

Asked to Review API Security, Don't Know Where to Start?

#apisecurity #checklist #codereview #express
Comments
4 min read
API Authentication Failures: Checks to Run Before You Blame the Rate Limiter
stark_zhuang_df5076f35c68 profile

API Authentication Failures: Checks to Run Before You Blame the Rate Limiter

#apisecurity #authorization #owasp #ratelimiting
Comments
2 min read
Swagger UI on 229,632 titles: the API documentation that publishes more than intended
bianliang profile

Swagger UI on 229,632 titles: the API documentation that publishes more than intended

#apisecurity #swagger #openapi
Comments
2 min read
Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460
stark_zhuang_df5076f35c68 profile

Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

#cisco #ise #apisecurity #authentication
Comments
3 min read
Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT
merolhack profile

Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT

#macharchitecture #apisecurity #owasptop10 #jwt
Comments
8 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services
mtahir27 profile

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

#owasp #apisecurity #fastify #typescript
Comments
8 min read
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory
iamdevbox profile

SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

#scim #provisioning #apisecurity #iam
Comments
8 min read
CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know
bianliang profile

CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know

#authentication #apisecurity #vulnerability
Comments
2 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
bianliang profile

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

#apisecurity #authorization #bola #owasp
Comments
4 min read
Laravel Rate Limiting: Throttling Routes Correctly
devtalk94 profile

Laravel Rate Limiting: Throttling Routes Correctly

#laravel #laravelrouting #ratelimiting #apisecurity
Comments 2
10 min read
API Security: The Attack Surface That Grows Without a Firewall
kozhevniko profile

API Security: The Attack Surface That Grows Without a Firewall

#apisecurity #owasp #authorization
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.