We are excited to announce that Char49 will be presenting at the NMFTA Cybersecurity Conference 2024, taking place from October 27 to 29 in Cleveland, OH – a sold-out event that plays a critical role to the Motor Freight infosec community. Our Principal Security Researcher, Paulo Silva, will be delivering a compelling talk titled "Navigating the Shadows: Understanding API Security Through History."
Either way, you may consider joining Paulo Silva, our Principal Security Researcher and Co-Leader at the OWASP API Security Project, on June 26th, for a whole day of hands-on training on API security.
"The Dark Side of APIs - the Attacker's Approach to Protecting Software" is a 1-day hands-on trai...
In today's digital landscape, Application Programming Interfaces (APIs) serve as the connective tissue that enables seamless data and service exchanges between applications and businesses. However, with this great power comes great responsibility, as API security has become a critical concern. To ad...
One of the challenges for bad actors, apart from finding an exploitable flaw, is to pass unnoticed not only during the research process but also during the exploitation phase. Insufficient logging and monitoring make it hard or even impossible to detect and mitigate suspicious activity or attacks ta...
Introducing breaking changes to a live API with hundreds, thousands, or even millions of active users is (usually) not an option. Releasing a new API version gives a chance to existing users to work on their integrations to migrate to the latest version, without interrupting the service. Nevertheles...
Given their role, APIs interact with several other (software) components such as filesystem, databases, LDAP, or other internal and external APIs. Not all these components are capable of validating and sanitizing the input they receive. When APIs neglect this responsibility, properly validate and sa...
