What is an API? What makes them special? And what kind of APIs are out there? #apisecurity #apis #bugbountytips #BugBounty
November 30, 2024 at 8:00 AM
What is an API? What makes them special? And what kind of APIs are out there? #apisecurity #apis #bugbountytips #BugBounty
Autonomous AI Agents Weaponizing Retail eCommerce APIs for Credit Card Data Theft
https://cybersecuritynews.com/ai-agents-retail-credit-card-theft
https://flagthis.com/tldr/7818
##AIAgents ##APISecurity ##CredentialStuffing ##DataExfiltration ##BotMitigation
https://cybersecuritynews.com/ai-agents-retail-credit-card-theft
https://flagthis.com/tldr/7818
##AIAgents ##APISecurity ##CredentialStuffing ##DataExfiltration ##BotMitigation
September 23, 2026 at 5:49 AM
Autonomous AI Agents Weaponizing Retail eCommerce APIs for Credit Card Data Theft
https://cybersecuritynews.com/ai-agents-retail-credit-card-theft
https://flagthis.com/tldr/7818
##AIAgents ##APISecurity ##CredentialStuffing ##DataExfiltration ##BotMitigation
https://cybersecuritynews.com/ai-agents-retail-credit-card-theft
https://flagthis.com/tldr/7818
##AIAgents ##APISecurity ##CredentialStuffing ##DataExfiltration ##BotMitigation
Waiting for the students to arrive for my #apisecurity class today at #owaspglobalappsec. 🥳
June 24, 2026 at 6:34 AM
Waiting for the students to arrive for my #apisecurity class today at #owaspglobalappsec. 🥳
Rate-limiting workarounds remain too simple to exploit in high-traffic applications. #CyberSecurity #APISecurity
October 26, 2025 at 5:10 PM
Rate-limiting workarounds remain too simple to exploit in high-traffic applications. #CyberSecurity #APISecurity
The latest update for #SaltSecurity includes "#AI Security Has a Context Problem" and "The Role of #AgenticAI in #Cybersecurity".
#APISecurity #AppSec https://opsmtrs.com/40EBWWv
#APISecurity #AppSec https://opsmtrs.com/40EBWWv
Salt Security
The leading API security company, providing the context needed to discover APIs, stop attacks, and remediate vulnerabilities to accelerate business innovation.
opsmtrs.com
September 24, 2026 at 12:08 AM
The latest update for #SaltSecurity includes "#AI Security Has a Context Problem" and "The Role of #AgenticAI in #Cybersecurity".
#APISecurity #AppSec https://opsmtrs.com/40EBWWv
#APISecurity #AppSec https://opsmtrs.com/40EBWWv
The latest update for #AppSentinels includes "What Does #NIST IR 8587 Mean for #API Security?" and "Top 7 #APISecurity Tools for Banks and Fintechs in 2026".
#cybersecurity #AppSec https://opsmtrs.com/3MZSK4Z
#cybersecurity #AppSec https://opsmtrs.com/3MZSK4Z
AppSentinels
We’re a group of security and technology experts with a mission to fix gaps in application security.
opsmtrs.com
September 24, 2026 at 12:27 AM
The latest update for #AppSentinels includes "What Does #NIST IR 8587 Mean for #API Security?" and "Top 7 #APISecurity Tools for Banks and Fintechs in 2026".
#cybersecurity #AppSec https://opsmtrs.com/3MZSK4Z
#cybersecurity #AppSec https://opsmtrs.com/3MZSK4Z
🚀 New article: Strengthen your Java app's security with API authentication, CSP, CORS, and HTTP security headers.
Dive into this comprehensive guide for Java developers: API Web Application Security
ionutbalosin.com/2025/03/api-...
#Java #Security #APIsecurity
Dive into this comprehensive guide for Java developers: API Web Application Security
ionutbalosin.com/2025/03/api-...
#Java #Security #APIsecurity
https://ionutbalosin.com/2025/03/api-we…
March 18, 2025 at 6:41 AM
🚀 New article: Strengthen your Java app's security with API authentication, CSP, CORS, and HTTP security headers.
Dive into this comprehensive guide for Java developers: API Web Application Security
ionutbalosin.com/2025/03/api-...
#Java #Security #APIsecurity
Dive into this comprehensive guide for Java developers: API Web Application Security
ionutbalosin.com/2025/03/api-...
#Java #Security #APIsecurity
The #Graylog UK team took some time to celebrate the season this week with a festive team lunch! 🎉 🎁🍷✨
(Party time is fun. 🥳)
#cybersecurity #SIEM #APIsecurity #TDIR
(Party time is fun. 🥳)
#cybersecurity #SIEM #APIsecurity #TDIR
December 13, 2024 at 9:03 PM
The #Graylog UK team took some time to celebrate the season this week with a festive team lunch! 🎉 🎁🍷✨
(Party time is fun. 🥳)
#cybersecurity #SIEM #APIsecurity #TDIR
(Party time is fun. 🥳)
#cybersecurity #SIEM #APIsecurity #TDIR
Bifrost flaw allows unauthenticated command execution over its management API—patch to v2.1.0 now. #AI #Security #APISecurity #Bifrost #Vulnerability #Cybersecurity thedailytechfeed.com/critical-bif...
September 22, 2026 at 4:56 PM
Bifrost flaw allows unauthenticated command execution over its management API—patch to v2.1.0 now. #AI #Security #APISecurity #Bifrost #Vulnerability #Cybersecurity thedailytechfeed.com/critical-bif...
What's the No. 1 threat to APIs? What’s the most common API error? What makes APIs more challenging to protect vs. web apps? Discover the answers to these and other #APIsecurity questions: cfl.re/41TDEEN
December 12, 2024 at 7:08 AM
What's the No. 1 threat to APIs? What’s the most common API error? What makes APIs more challenging to protect vs. web apps? Discover the answers to these and other #APIsecurity questions: cfl.re/41TDEEN
Explore some APIs and security best practices in JavaScript, React, and Python. Enhance your app's security by combining these practices and techniques. #apisecurity
Best Practices for API Security: JavaScript and Python Examples
hackernoon.com
November 19, 2024 at 1:00 AM
Explore some APIs and security best practices in JavaScript, React, and Python. Enhance your app's security by combining these practices and techniques. #apisecurity
🛡️ High value low effort security tip for defenders…
If your organization has GitHub repositories, setup a process to regularly audit them for credentials.
Stuff like passwords, ssh keys, api keys, and any other secret you may be using.
If your organization has GitHub repositories, setup a process to regularly audit them for credentials.
Stuff like passwords, ssh keys, api keys, and any other secret you may be using.
April 23, 2025 at 11:00 AM
I'm giving a paid workshop on the #OWASP #APISecurity Top Ten with AntiSyphon training on September 19th, with a ranging pay scale. Check it out here:
https://twp.ai/9PTV3V
https://twp.ai/9PTV3V
July 31, 2025 at 4:05 AM
I'm giving a paid workshop on the #OWASP #APISecurity Top Ten with AntiSyphon training on September 19th, with a ranging pay scale. Check it out here:
https://twp.ai/9PTV3V
https://twp.ai/9PTV3V
Akamai’s white paper on the OWASP Top 10 API Security Risks.
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
www.akamai.com
August 11, 2026 at 1:53 PM
Akamai’s white paper on the OWASP Top 10 API Security Risks.
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
#Cybersecurity #APISecurity #OWASP #OWASPTop10 #ApplicationSecurity #AppSec #CloudSecurity #DevSecOps #SoftwareDevelopment #ZeroTrust #API #AI #LLM #SecurityEngineering
www.akamai.com/resources/wh...
🎥 Missed one of my past conference talks? Let’s fix that.
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“Top Ten Security Tips for APIs”
📽️ https://twp.ai/9PTmIR
#CyberSecurity #SecurityAwareness #appsec #APISecurity
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“Top Ten Security Tips for APIs”
📽️ https://twp.ai/9PTmIR
#CyberSecurity #SecurityAwareness #appsec #APISecurity
youtu.be
Top Ten Security Tips For APIs | Tanya Janca
twp.ai
July 12, 2025 at 3:43 AM
🎥 Missed one of my past conference talks? Let’s fix that.
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“Top Ten Security Tips for APIs”
📽️ https://twp.ai/9PTmIR
#CyberSecurity #SecurityAwareness #appsec #APISecurity
I’m sharing my favorites—packed with real-world advice, lessons, and a few laughs.
“Top Ten Security Tips for APIs”
📽️ https://twp.ai/9PTmIR
#CyberSecurity #SecurityAwareness #appsec #APISecurity
We had an awesome time last week in Charleston, SC at our company gathering! 🎊 From morning jogs, to volunteering + giving back to the community, to productive meetings (hello "Sheloggers") & more.
We're pumped & ready for 2025.💪 Let's go!🚀 #cybersecurity #APIsecurity #SIEM #infosec
We're pumped & ready for 2025.💪 Let's go!🚀 #cybersecurity #APIsecurity #SIEM #infosec
January 21, 2025 at 10:36 PM
We had an awesome time last week in Charleston, SC at our company gathering! 🎊 From morning jogs, to volunteering + giving back to the community, to productive meetings (hello "Sheloggers") & more.
We're pumped & ready for 2025.💪 Let's go!🚀 #cybersecurity #APIsecurity #SIEM #infosec
We're pumped & ready for 2025.💪 Let's go!🚀 #cybersecurity #APIsecurity #SIEM #infosec
Had a blast at the API security happy hour, and not just 'cause it was in a pub!🍻 Big thanks to all who shared how my content helped you - your stories mean the world to me!😊 #APIsecurity #RSAC2025
April 30, 2025 at 2:23 AM
Had a blast at the API security happy hour, and not just 'cause it was in a pub!🍻 Big thanks to all who shared how my content helped you - your stories mean the world to me!😊 #APIsecurity #RSAC2025
Your API traffic doubles. Looks like a big customer. It's a scraper, same calls from hundreds of IPs, each just under your rate limit.
IPGeolocation.io flags the data-center and proxy IPs your per-IP limits can't see.
ipgeolocation.io/ip-...
#APISecurity #botmanagement
IPGeolocation.io flags the data-center and proxy IPs your per-IP limits can't see.
ipgeolocation.io/ip-...
#APISecurity #botmanagement
September 24, 2026 at 8:26 AM
Your API traffic doubles. Looks like a big customer. It's a scraper, same calls from hundreds of IPs, each just under your rate limit.
IPGeolocation.io flags the data-center and proxy IPs your per-IP limits can't see.
ipgeolocation.io/ip-...
#APISecurity #botmanagement
IPGeolocation.io flags the data-center and proxy IPs your per-IP limits can't see.
ipgeolocation.io/ip-...
#APISecurity #botmanagement
🚨 New Lab Alert!
💡 How NOT to revoke JWTs: Learn how Base64 malleability can be used to bypass weak revocation mechanisms.
Ready to test your skills? 💥
👉 pentesterlab.com/exercises/ap...
#APISecurity #Pentesting
💡 How NOT to revoke JWTs: Learn how Base64 malleability can be used to bypass weak revocation mechanisms.
Ready to test your skills? 💥
👉 pentesterlab.com/exercises/ap...
#APISecurity #Pentesting
PentesterLab: API JWT REVOCATION
This exercise covers how to bypass a weak JWT Revocation Mechanism.
pentesterlab.com
December 12, 2024 at 11:00 PM
🚨 New Lab Alert!
💡 How NOT to revoke JWTs: Learn how Base64 malleability can be used to bypass weak revocation mechanisms.
Ready to test your skills? 💥
👉 pentesterlab.com/exercises/ap...
#APISecurity #Pentesting
💡 How NOT to revoke JWTs: Learn how Base64 malleability can be used to bypass weak revocation mechanisms.
Ready to test your skills? 💥
👉 pentesterlab.com/exercises/ap...
#APISecurity #Pentesting
Cloudflare CEO Matthew Prince confirmed on June 3, 2026 that automated bot traffic now accounts for 57.5% of all HTTP requests surpassing human traffic at 42.5%.
#DeccanFounders #BotTraffic #AIAgents #Cloudflare #InternetInfrastructure #AIInternet #WebPlatform #APISecurity #CyberSecurity
#DeccanFounders #BotTraffic #AIAgents #Cloudflare #InternetInfrastructure #AIInternet #WebPlatform #APISecurity #CyberSecurity
June 9, 2026 at 12:55 PM
Cloudflare CEO Matthew Prince confirmed on June 3, 2026 that automated bot traffic now accounts for 57.5% of all HTTP requests surpassing human traffic at 42.5%.
#DeccanFounders #BotTraffic #AIAgents #Cloudflare #InternetInfrastructure #AIInternet #WebPlatform #APISecurity #CyberSecurity
#DeccanFounders #BotTraffic #AIAgents #Cloudflare #InternetInfrastructure #AIInternet #WebPlatform #APISecurity #CyberSecurity
👁️🗨️ A peek behind the scenes at today's (virtual) #GraylogGO. GO is on & you can still join us! Here's the link: graylog.info/47zFdwy
Sending a big shout out to our dedicated #Graylog team who have worked so hard to make it all happen. 📢
👏 👏 👏
#cybersecurity #infosec #SIEM #APIsecurity
Sending a big shout out to our dedicated #Graylog team who have worked so hard to make it all happen. 📢
👏 👏 👏
#cybersecurity #infosec #SIEM #APIsecurity
September 16, 2025 at 4:03 PM
👁️🗨️ A peek behind the scenes at today's (virtual) #GraylogGO. GO is on & you can still join us! Here's the link: graylog.info/47zFdwy
Sending a big shout out to our dedicated #Graylog team who have worked so hard to make it all happen. 📢
👏 👏 👏
#cybersecurity #infosec #SIEM #APIsecurity
Sending a big shout out to our dedicated #Graylog team who have worked so hard to make it all happen. 📢
👏 👏 👏
#cybersecurity #infosec #SIEM #APIsecurity
🎙️ New Episode
Why did an offensive security consultancy choose Ridge Security after evaluating multiple automated pentesting platforms?
Listen now!
youtu.be/_6nWKOEuOH8
open.spotify.com/episode/1EBa...
#Cybersecurity #Pentesting #APISecurity #AI #RidgeSecurity #OffensiveSecurity
Why did an offensive security consultancy choose Ridge Security after evaluating multiple automated pentesting platforms?
Listen now!
youtu.be/_6nWKOEuOH8
open.spotify.com/episode/1EBa...
#Cybersecurity #Pentesting #APISecurity #AI #RidgeSecurity #OffensiveSecurity
June 23, 2026 at 9:16 PM
🎙️ New Episode
Why did an offensive security consultancy choose Ridge Security after evaluating multiple automated pentesting platforms?
Listen now!
youtu.be/_6nWKOEuOH8
open.spotify.com/episode/1EBa...
#Cybersecurity #Pentesting #APISecurity #AI #RidgeSecurity #OffensiveSecurity
Why did an offensive security consultancy choose Ridge Security after evaluating multiple automated pentesting platforms?
Listen now!
youtu.be/_6nWKOEuOH8
open.spotify.com/episode/1EBa...
#Cybersecurity #Pentesting #APISecurity #AI #RidgeSecurity #OffensiveSecurity
I'm giving a paid workshop on the #OWASP #APISecurity Top Ten with AntiSyphon training on September 19th, with a ranging pay scale. Check it out here:
https://twp.ai/9PT5Qw
https://twp.ai/9PT5Qw
July 14, 2025 at 2:47 AM
I'm giving a paid workshop on the #OWASP #APISecurity Top Ten with AntiSyphon training on September 19th, with a ranging pay scale. Check it out here:
https://twp.ai/9PT5Qw
https://twp.ai/9PT5Qw
💡 Discover how to secure API plugins for Microsoft 365 Copilot using Entra ID!
Let Bob German guide you through OAuth validation and best practices for secure integrations.
📺 Watch the demo here → https://youtu.be/Ev9R5E_Odh8
#Microsoft365Dev #Copilot #APISecurity #entraid
Let Bob German guide you through OAuth validation and best practices for secure integrations.
📺 Watch the demo here → https://youtu.be/Ev9R5E_Odh8
#Microsoft365Dev #Copilot #APISecurity #entraid
January 7, 2025 at 11:13 AM
💡 Discover how to secure API plugins for Microsoft 365 Copilot using Entra ID!
Let Bob German guide you through OAuth validation and best practices for secure integrations.
📺 Watch the demo here → https://youtu.be/Ev9R5E_Odh8
#Microsoft365Dev #Copilot #APISecurity #entraid
Let Bob German guide you through OAuth validation and best practices for secure integrations.
📺 Watch the demo here → https://youtu.be/Ev9R5E_Odh8
#Microsoft365Dev #Copilot #APISecurity #entraid