The API and Application Protection Blog

ThreatX platform updates, threat research on the latest critical CVEs and 0 days impacting APIs and web applications, alongside strategies and tactics for overcoming the challenges of modern security teams.

Subscribe for updates

Sign up for exclusive threat research, company and content updates, and the occasional fun contest.

  • Blog
  • Application Security
  • Threat Intelligence
  • News
  • Product Updates
  • People & Culture
  • Vulnerabilities
  • Cloud Security
  • API Security
API Security BY Bret Settle

What Security Misconfiguration Is, and How We Can Help

No. 8 on the 2023 OWASP API Top 10 vulnerabilities list is security misconfiguration. Vulnerability 8 is a catch-all for any design flaws in an API that could make it vulnerable.  OWASP says of this flaw, “Attackers will often attempt to find unpatched flaws, common endpoints, services running with insecure default configurations, or unprotected files […]

VIEW MORE