Webinar on API breaches and input validation

🗣 General Discussion
1

The recent vulnerabilities found in APIs from Trello, F5 and Spoutable are a small sample of common exploits, that teams can prevent with proper runtime validation of the API traffic.

Here’s the link to the OWASP resource discussing input validation:

Feel free to post questions on this webinar session or share your suggestions on how we can better protect APIs from these types of attacks!

2

Fantastic work putting this together Anthony, looking forward to the session!

1 Like
3

Recorded video of the webinar is below.
Reviewing it, I think it might have been good to go over the Spoutible incident in more detail.
There’s a lot of focus on the request-side threats, and perhaps not enough to excessive data exposure in the response side. :man_shrugging: