Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
apisecurity
Follow
Hide
Posts
Left menu
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Swagger UI on 229,632 titles: the API documentation that publishes more than intended
yutianle
yutianle
yutianle
Follow
Oct 13
Swagger UI on 229,632 titles: the API documentation that publishes more than intended
#
apisecurity
#
swagger
#
openapi
Comments
Add Comment
2 min read
Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460
StarkMan
StarkMan
StarkMan
Follow
Oct 10
Why API Gateways Keep Failing Authentication: Lessons From Cisco ISE CVE-2026-76460
#
cisco
#
ise
#
apisecurity
#
authentication
Comments
Add Comment
3 min read
Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT
Lenin Jose Meza Zarco
Lenin Jose Meza Zarco
Lenin Jose Meza Zarco
Follow
Oct 9
Mitigación de Vulnerabilidades en APIs Enterprise: Blindaje contra OWASP Top 10 y Gestión Criptográfica de Tokens JWT
#
macharchitecture
#
apisecurity
#
owasptop10
#
jwt
Comments
Add Comment
8 min read
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services
Muhammad Tahir
Muhammad Tahir
Muhammad Tahir
Follow
Oct 9
Defending Against OWASP Top 10 API Security Vulnerabilities in Modern Backend Services
#
owasp
#
apisecurity
#
fastify
#
typescript
Comments
Add Comment
8 min read
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory
IAMDevBox
IAMDevBox
IAMDevBox
Follow
Oct 6
SCIM Endpoint Security: How to Lock Down a Provisioning API Before It Leaks Your Directory
#
scim
#
provisioning
#
apisecurity
#
iam
Comments
Add Comment
8 min read
CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know
yutianle
yutianle
yutianle
Follow
Oct 6
CVE-2026-5430: the JWT validator that skipped signature checking when it met an algorithm it did not know
#
authentication
#
apisecurity
#
vulnerability
Comments
Add Comment
2 min read
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
yutianle
yutianle
yutianle
Follow
Sep 25
Authorization at the Object Level: Testing for BOLA Before Someone Else Does
#
apisecurity
#
authorization
#
bola
#
owasp
Comments
Add Comment
4 min read
Laravel Rate Limiting: Throttling Routes Correctly
devTalk
devTalk
devTalk
Follow
Oct 7
Laravel Rate Limiting: Throttling Routes Correctly
#
laravel
#
laravelrouting
#
ratelimiting
#
apisecurity
Comments
2
comments
10 min read
API Security: The Attack Surface That Grows Without a Firewall
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 21
API Security: The Attack Surface That Grows Without a Firewall
#
apisecurity
#
owasp
#
authorization
Comments
Add Comment
2 min read
Your AI Agent’s Reasoning Isn’t as Private as You Think
Ali Suleyman TOPUZ
Ali Suleyman TOPUZ
Ali Suleyman TOPUZ
Follow
Oct 4
Your AI Agent’s Reasoning Isn’t as Private as You Think
#
apisecurity
#
llmsecurity
#
aisecurity
Comments
Add Comment
13 min read
Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions
JudsonRhodes1569
JudsonRhodes1569
JudsonRhodes1569
Follow
Sep 13
Production API Key Rotation Explained: 6 Least-Privilege Checks for Node.js GitHub Actions
#
apisecurity
#
githubactions
#
node
Comments
1
comment
6 min read
How to Structure Your API Security Testing with OWASP ASTF 🚀
Rodolpho Sa
Rodolpho Sa
Rodolpho Sa
Follow
Sep 4
How to Structure Your API Security Testing with OWASP ASTF 🚀
#
apisecurity
#
devsecops
#
security
#
devops
Comments
Add Comment
1 min read
I Built the Tool That Scores MCP Listings, Then Ran It on My Own API — It Gave Me a B-
ScriptMasterLabs
ScriptMasterLabs
ScriptMasterLabs
Follow
Oct 4
I Built the Tool That Scores MCP Listings, Then Ran It on My Own API — It Gave Me a B-
#
aiagents
#
mcp
#
apisecurity
#
devtools
Comments
Add Comment
3 min read
Visa Open-Sourced Its AI Cyber Defence — and Quietly Let Agents Spend
ScriptMasterLabs
ScriptMasterLabs
ScriptMasterLabs
Follow
Oct 4
Visa Open-Sourced Its AI Cyber Defence — and Quietly Let Agents Spend
#
aiagents
#
payments
#
apisecurity
#
ai
Comments
Add Comment
3 min read
How to Set Spending Limits for AI Agents: enforce at the payment layer, not the prompt
ScriptMasterLabs
ScriptMasterLabs
ScriptMasterLabs
Follow
Oct 4
How to Set Spending Limits for AI Agents: enforce at the payment layer, not the prompt
#
aiagents
#
x402
#
apisecurity
#
tutorial
Comments
Add Comment
4 min read
👋
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account