DEV Community

#apisecurity

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Swagger UI on 229,632 titles: the API documentation that publishes more than intended

Swagger UI on 229,632 titles: the API documentation that publishes more than intended

Comments
2 min read
Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460

Comments
3 min read
Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT

Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT

Comments
8 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services

Comments
8 min read
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory

Comments
8 min read
CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know

CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know

Comments
2 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Authorization at the Object Level: Testing for BOLA Before Someone Else Does

Comments
4 min read
Laravel Rate Limiting: Throttling Routes Correctly

Laravel Rate Limiting: Throttling Routes Correctly

Comments 2
10 min read
API Security: The Attack Surface That Grows Without a Firewall

API Security: The Attack Surface That Grows Without a Firewall

Comments
2 min read
Your AI Agent’s Reasoning Isn’t as Private as You Think

Your AI Agent’s Reasoning Isn’t as Private as You Think

Comments
13 min read
Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions

Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions

Comments 1
6 min read
How to Structure Your API Security Testing with OWASP ASTF 🚀

How to Structure Your API Security Testing with OWASP ASTF 🚀

Comments
1 min read
I Built the Tool That Scores MCP Listings, Then Ran It on My Own API — It Gave Me a B-

I Built the Tool That Scores MCP Listings, Then Ran It on My Own API — It Gave Me a B-

Comments
3 min read
Visa Open-Sourced Its AI Cyber Defence — and Quietly Let Agents Spend

Visa Open-Sourced Its AI Cyber Defence — and Quietly Let Agents Spend

Comments
3 min read
How to Set Spending Limits for AI Agents: enforce at the payment layer, not the prompt

How to Set Spending Limits for AI Agents: enforce at the payment layer, not the prompt

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.