shadow API

The transition to APIs has created threat actors’ new favorite playground and security teams’ biggest headache. This is partly due to the acceleration of software development and organizations’ desire to release software ...

Just kidding. I am happy to remain an individual contributor. However, if the HR system API had been implemented without the appropriate levels of authorization control, commonly referred to as broken object-level ...