APIsec @apisec_ai
The APIsec security testing platform discovers the most serious API vulnerabilities that lead to data theft and compromise. apisec.ai San Francisco, CA 94103, USA Joined April 2020-
Tweets143
-
Followers3K
-
Following7
-
Likes47
APIs are critical for modern online services, but they can also be a gateway for cyberattacks. Programs like customer loyalty rewards are prime targets, turning companies into "accidental banks" with valuable customer data. More from Forbes here: ow.ly/Rwq250TQXWw
OWASP Villain #7... Loki! Loki’s ability to deceive, manipulate, and gain access to restricted areas is a metaphor for how SSRF attacks abuse a server's trust and access levels, making him an apt representation of this vulnerability.
OWASP Villain #6... Lex Luthor! Lex Luthor represents OWASP API Security Risk #6, Unrestricted Access to Sensitive Business Flows, by exploiting weaknesses and manipulating systems for his benefit.
OWASP Villain #5... Rogue from X-men! Her ability to absorb others' powers, identities, and access to abilities that aren’t hers by default is similar to Broken Function Level Authorization, which allows an attacker to exploit insufficient access control. #APIsecOWASPVillains
OWASP Villain #4... Galactus! Just as Galactus devours entire planets without resistance, a lack of proper rate limiting allows an attacker to "consume" server resources without restriction, leading to system exhaustion or failure. #APIsecOWASPVillains
OWASP Villain #3... The Riddler! The Riddler's obsession with breaking into places through mental trickery mirrors brute force or password guessing attacks on weak authentication systems. #APIsecOWASPVillains
OWASP #2 alert! 🚨 A critical vulnerability (CVE-2024-45229) in Versa Networks' Versa Director, a platform for managing Secure SD-WAN and SASE solutions, allows attackers to exploit REST APIs that lack authentication. Read more: ow.ly/mLHQ50TAjEB
OWASP Villain #2... Mystique Mystique’s ability to impersonate others reflects the danger of poor authentication systems, where an attacker can gain unauthorized access by masquerading as a legitimate user.
Miss APISEC|CON Money last week? You can catch all the replays here: youtube.com/playlist?list=…
OWASP Villain #1... Marvel's Ultron 🤖 Ultron’s ability to bypass security controls and take over systems mirrors how attackers exploit broken authorization to escalate privileges or access unauthorized resources. #APIsecOWASPVillains
Happy Friday the 13th 👀 We'll be kicking off spooky season next month by sharing some of the scariest OWASP villains with you. Stay tuned! 👻
Don't miss our monthly API Security workshop next week! Join Dan as he goes through API security fundamentals and best practices in a free one-hour session. Register: my.demio.com/ref/Z17YDvanYB…
In the digital age, APIs are the backbone of business operations, driving everything from customer experiences to backend processes. However, as their adoption skyrockets, so does the potential for misuse and security breaches. Read our recap here: apisecuniversity.com/blog/securing-…
Curious about how a leading beauty retailer automated their API security? Dive into our latest case study to see how Sally Beauty leveraged APIsec to enhance their cybersecurity measures and streamline their processes. apisec.ai/case-studies/s…
OWASP API #4: Unrestricted Resource Consumption Hackers exploited an API to verify millions of Authy MFA phone numbers! 🚨 Read more: bleepingcomputer.com/news/security/…
Several critical mistakes can compromise the integrity and safety of your applications in API security testing. Dana Epp discusses the seven deadly sins of API security testing and how to avoid them. Read our recap of his APISEC|CON session here: apisecuniversity.com/blog/7-deadly-…
API authentication is a critical aspect of web security, ensuring that only authorized clients can access your API. There are various methods available for API authentication, each with its pros and cons. Read more: apisecuniversity.com/blog/exploring…
Integrate APIsec Scan for CI/CD into your development pipeline for continuous, automated security testing. Easy setup via GitHub, no complex configurations needed. Plus, it's free! apisecuniversity.com/api-tools-and-…
🎓 APIsec University workshop with ISC2 North Bay 📅 June 27, 2024 ⏰ 6:00 PST Register: isc2-northbay-chapter.org/meetings-events
Shift left or shield right? 🤔 An overwhelming 77% of respondents preferred to shift left, recognizing the benefit of discovering vulnerabilities earlier than later, preferably before production. Do you agree?
hAPI_hacker @hAPI_hacker
14K Followers 737 Following { "name": "Corey J. Ball", "author": "Hacking APIs", "creator": "https://t.co/y3EHBlzHvJ", "is_admin": true }
Rana Khalil 🇵🇸 @rana__khalil
56K Followers 844 Following AppSec Team Lead | OSCP | CEO & Instructor of @ranakhalilacad
Nithin 🦹♂️ @thebinarybot
19K Followers 551 Following Heckr | Former Community Manager @InfoSecComm | eJPT | Certified Red Team Professional (CRTP)
Nikhil @Ox4d5a
18K Followers 1K Following Penetration Tester | i XCHG 0's 1's and do hacks | Red Team Sorcery https://t.co/6LUhkvN2hz | #eJPT | #OSCP | #CRTP | #CRTA | #CESP | #CRTE
Het Mehta @hetmehtaa
36K Followers 1K Following Security Analyst | Content Creator | I Spread Cybersecurity News & Talk about AI, Cloud, Tech, Tools & Recent Updates
root@AkashHamal0x01:~... @AkashHamal0x01
9K Followers 713 Following Solo | https://t.co/I6KH8WN8nm | Community Helper 🤝| WebApp Security 🐞 | Avid Learner 📖 | Male | Father of One | Married 💍 Asia❤️ . wiener/peter
Md Ismail Šojal �... @0x0SojalSec
31K Followers 5K Following Cyber_Security_Re-searcher || 0SINT || Malware Analysis II Pwn || Ai Re-searcher || Project @AIStrikeSec || 0ld Accounts Suspended @0xSojalSec ||
Jack sparow @Perfecttwt
19 Followers 0 Following Spread love & happiness everywhere mallu gigolo only professional works
Abdulr7man 👽 @abdu1r7m4n
8K Followers 14 Following
Tolerance @Tolerance914666
72 Followers 4K Following
Slalmoo @Slalmoo0382
72 Followers 2K Following
3m0n @em0n555
44 Followers 1K Following
Sika Ben @benjamin_n7307
41 Followers 804 Following Offensive Security Enthusiast | AppSec Researcher
Pedro Fernandes @pedrofcyber
76 Followers 750 Following Engineer at the National Cybersecurity Centre of Portugal | @cncsgovpt Previously at @Microsoft | @MSFTSecurity Certified Ethical Hacker (CEH)
Haykins @Etz_Atomic
534 Followers 989 Following Ain't perfect 🏀 #Mambamentality || Cybersecurity Enthusiast || Full stack Developer
Gejau @Gejau52938
22 Followers 966 Following
Xallpav @Xallpav701
66 Followers 2K Following
Eitan @EitanLepton
0 Followers 19 Following
ice @songer_ice
8 Followers 422 Following
thenuts.co.za @TheNutsCoZA
2 Followers 90 Following The Official X Page for https://t.co/kyFvXSnDdz South Africa's Favorite Poker Forum - Come Share Your Poker Journey
Jessica Ray @JessicaRay37216
1 Followers 130 Following Recruiting webshell engineers to penetrate websites, with a monthly salary of up to $100,000. If interested, please contact https://t.co/JL0guSmuvr
Alain Franco @AlainFr39884105
0 Followers 173 Following
Leru Solutions Ltd @LeruSolutionsUK
8 Followers 276 Following The expensive way to protect your customer data is to wait for a cyber criminal to find holes in your security, the best way is to ask us to fix them first.
Sanjay @Sanjay91783098
6 Followers 127 Following Cybersecurity Enthusiast / Learner / penetration tester🧑💻 / CTF player / THM top 1% | #373 global rank at @hackthebox | https://t.co/X5yvL2mm7C
Look at my homepage @cole_meyer43343
24 Followers 3K Following Virtual currency game platform, deposit and get 50% bonus, recruit agents to earn 100,000 USDT per month, contact us https://t.co/j3jdAz4niL
Ryel @RyelHunter
57 Followers 714 Following
I KNOW YOU @officialpch01
36 Followers 168 Following Cybersecurity, Software dev, Bug bounty hunter, Web app developer..
PQ @cussiee
53 Followers 1K Following Threat Hunter. ⚽ & 🏈 & 🏎️ & 🎧 not a bot (isn't this exactly what a bot would put in his bio? 🤔🤭
kolten @Merl1ng
125 Followers 4K Following
ɘɿuɔɐɿɈ @tiersigma
659 Followers 7K Following defenders think in lists.attackers think in graphs. as long as this is true, attackers win. ---sanity through retrowave™--- ---wannabe schwachstellenjaeger---
Why do you want to kn... @Whydoyouwa77002
11 Followers 101 Following
Defenderwww @defenderwww
69 Followers 258 Following
Arjun Jaiswal @jaiswal_ar22468
1 Followers 251 Following
k @kyzn
64 Followers 124 Following
Zyan Nitx @Thet808181
7 Followers 664 Following
Sharzun @iamsharzun
26 Followers 120 Following Bʀᴇᴀᴄʜ ᴛʜᴇ Uɴᴋɴᴏᴡɴ, Dᴇғᴇɴᴅ ᴛʜᴇ Kɴᴏᴡɴ 🧩♟️ யாதும் ஊரே யாவரும் கேளிர் 🖤 Jᴜsᴛ A Cᴜʀɪᴏᴜs Mᴀɴ💡
kJonX @kjon_life
0 Followers 26 Following I help people // solutions architect - dev - security // frontend: SCSS, JavaScript // backend dev: Python, Rust, AWS, APIs // we build systems that work
hAPI Labs @hapilabs_ai
16 Followers 82 Following API security & pentesting for enterprises across industries. Tailored assessments, key vuln detection, and expert support.
Joko @Joko56633869302
0 Followers 105 Following
Andoni Urrutia @andoniurrutia
273 Followers 2K Following
Kedar Kulkarni @kedman1234
47 Followers 338 Following An experienced Web developer with over 17 years of experience in all stages of advanced web development. Skilled in frontend solutions.
[email protected] @errsivm0990902
0 Followers 101 Following
Project Black Box @quantumblackbox
30 Followers 76 Following Driving innovation with cutting-edge security and AI solutions. Redefining privacy and empowering technology with precision and integrity.
Hon. Whitehat the Cyb... @Godasbroughtjoy
1K Followers 3K Following Omo Oba Olowu, AppSec, Victoria Concordia Crescit
Adesola 💻🇳🇬�... @BIG_ISOMER
188 Followers 2K Following Certified IBM Cybersecurity Analyst || Digital4all Cybersecurity ALUMNI || 3MTT Cybersecurity ALUMNI || @Ingressive4Good Graduate
hAPI_hacker @hAPI_hacker
14K Followers 737 Following { "name": "Corey J. Ball", "author": "Hacking APIs", "creator": "https://t.co/y3EHBlzHvJ", "is_admin": true }
David Bombal @davidbombal
170K Followers 690 Following YouTube: https://t.co/xGPVEj6ULN Discord: https://t.co/GZI30F45va Website: https://t.co/MpcS9ylBrV
Cleric Beast 🐲 �... @jakes55555
2K Followers 4K Following Getting my hands dirty with Cloud Devops. Ambivert. Ex-network security chap. Pardon my German, in the learning curve.
APIsec University @apisecu
3K Followers 7 Following APIsec University provides free training courses on API Security. Learn how to find API vulnerabilities and keep them secure.
Intesar Shannan Moham... @shannan_
59 Followers 14 Following Co-Founder @ PerfAI, Inc (AI for API Privacy, Governance & Test)
APIs You Won't Hate @apisyouwonthate
3K Followers 62 Following The world's best community of API developers. OSS tools, Community-driven books, articles, and a welcoming Slack. 🎙 Pod: https://t.co/9Nvdo0gnXQ
OWASP® Foundation @owasp
213K Followers 532 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10Trends for United States
You might like
