AI and API security intersect often! The tools and platforms used to build and host AI agents are themselves built and dependent on APIs...and sometimes vulnerable APIs...
webapisecurity.substack.com/p/mlflow-aut...
#APISecurity #WebAPISecurity #AISecurity
webapisecurity.substack.com/p/mlflow-aut...
#APISecurity #WebAPISecurity #AISecurity
MLFlow : Broken Authentication
How per-route authentication enforcement is prone to development mistakes and security flaws.
webapisecurity.substack.com
November 2, 2026 at 2:01 PM
AI and API security intersect often! The tools and platforms used to build and host AI agents are themselves built and dependent on APIs...and sometimes vulnerable APIs...
webapisecurity.substack.com/p/mlflow-aut...
#APISecurity #WebAPISecurity #AISecurity
webapisecurity.substack.com/p/mlflow-aut...
#APISecurity #WebAPISecurity #AISecurity
Psychology of Vulnerable Design
- Happy-path thinking
- Security through obscurity
- Client-side security fallacy
In this article we examine nine real world cases and ask the question: are your APIs vulnerable by design?
webapisecurity.substack.com/p/vulnerable...
#APISecurity #WebAPISecurity
- Happy-path thinking
- Security through obscurity
- Client-side security fallacy
In this article we examine nine real world cases and ask the question: are your APIs vulnerable by design?
webapisecurity.substack.com/p/vulnerable...
#APISecurity #WebAPISecurity
Vulnerable by Design
Beyond coding mistakes and misconfiguration errors, API vulnerabilities often stem from false assumptions about API security and where and how it should be applied.
webapisecurity.substack.com
November 3, 2026 at 1:38 PM
Psychology of Vulnerable Design
- Happy-path thinking
- Security through obscurity
- Client-side security fallacy
In this article we examine nine real world cases and ask the question: are your APIs vulnerable by design?
webapisecurity.substack.com/p/vulnerable...
#APISecurity #WebAPISecurity
- Happy-path thinking
- Security through obscurity
- Client-side security fallacy
In this article we examine nine real world cases and ask the question: are your APIs vulnerable by design?
webapisecurity.substack.com/p/vulnerable...
#APISecurity #WebAPISecurity
Sensitive military and defense sector data leaked exposed through a vulnerable API.
Surely there's a lesson to be learned there, in the form of a Secure API Practice? Check out the breakdown for details...
webapisecurity.substack.com/p/schemata-b...
#APISecurity #WebAPISecurity #SecureByDesign
Surely there's a lesson to be learned there, in the form of a Secure API Practice? Check out the breakdown for details...
webapisecurity.substack.com/p/schemata-b...
#APISecurity #WebAPISecurity #SecureByDesign
Schemata : BFLA
A training platform leaks sensitive military and defense sector data through an API showing signs of Broken Functional Level Authorization (OWASP 2023:API5)
webapisecurity.substack.com
October 31, 2026 at 5:07 AM
Sensitive military and defense sector data leaked exposed through a vulnerable API.
Surely there's a lesson to be learned there, in the form of a Secure API Practice? Check out the breakdown for details...
webapisecurity.substack.com/p/schemata-b...
#APISecurity #WebAPISecurity #SecureByDesign
Surely there's a lesson to be learned there, in the form of a Secure API Practice? Check out the breakdown for details...
webapisecurity.substack.com/p/schemata-b...
#APISecurity #WebAPISecurity #SecureByDesign
A platform for startup companies sponsored by the South Korea government was discovered to be leaking sensitive information through APIs in the background.
What does this reveal about the current state of API security?
webapisecurity.substack.com/p/without-a-... #apisecurity #webapisecurity #owasp
What does this reveal about the current state of API security?
webapisecurity.substack.com/p/without-a-... #apisecurity #webapisecurity #owasp
Without a GUI, Can Your APIs Stand Alone?
A South Korean government-sponsored platform suffered a critical API data breach. Did the frontend mask risks lurking in the backend until it was too late?
webapisecurity.substack.com
October 31, 2026 at 5:02 AM
A platform for startup companies sponsored by the South Korea government was discovered to be leaking sensitive information through APIs in the background.
What does this reveal about the current state of API security?
webapisecurity.substack.com/p/without-a-... #apisecurity #webapisecurity #owasp
What does this reveal about the current state of API security?
webapisecurity.substack.com/p/without-a-... #apisecurity #webapisecurity #owasp