Category: Blog

I’ve worked in cybersecurity a long time, and over the years have learned a lot about the tactics...

I’m happy to announce that ThreatX will be conducting more threat research with the formation of...

OWASP says of mass assignment, “Binding client provided data (e.g., JSON) to data models, without...

Last week, researchers discovered an HTTP request smuggling vulnerability in Node.js. This...

Attackers are like modern-day cartographers. The cartographers of old weren’t necessarily sailing...

APIs have become very popular attack targets, and almost all the attacks we see against API...

APIs (application programming interfaces) are a foundation for modern software development. They...

No. 1 on the OWASP Top 10 List of Critical API Security Risks, broken object level authorization or...

Welcome to ThreatX Security XChange – our blog series featuring security practitioners and...

Recently, I’ve been championing the idea of a “protection-first” approach when it comes to...

There’s a lot of talk about APIs and their security, or lack thereof, in the infosec community....

“Can the API security tool you are pitching – on its own – stop (block) API attacks...