Either way, you may consider joining Paulo Silva, our Principal Security Researcher and Co-Leader at the OWASP API Security Project, on June 26th, for a whole day of hands-on training on API security.
"The Dark Side of APIs - the Attacker's Approach to Protecting Software" is a 1-day hands-on trai...
In today's digital landscape, Application Programming Interfaces (APIs) serve as the connective tissue that enables seamless data and service exchanges between applications and businesses. However, with this great power comes great responsibility, as API security has become a critical concern. To ad...
We are excited to share that the OWASP API Security Top 10 2023 release candidate is now available.
Our own security researcher and OWASP API Security Project co-leader Paulo Silva took part in this effort, making us particularly proud of the work done. The latest trends and threats in API secur...
Photography by @Women4Cyber
If October was exciting, November was really amazing! Why? No, it wasn't for the colder and rainy days, not even for the roasted chestnuts or the delicious autumn oven meals.
First, Paulo Silva on November 9th took part at OWASP Lisboa Chapter meetup in a talk named...
One of the challenges for bad actors, apart from finding an exploitable flaw, is to pass unnoticed not only during the research process but also during the exploitation phase. Insufficient logging and monitoring make it hard or even impossible to detect and mitigate suspicious activity or attacks ta...
Introducing breaking changes to a live API with hundreds, thousands, or even millions of active users is (usually) not an option. Releasing a new API version gives a chance to existing users to work on their integrations to migrate to the latest version, without interrupting the service. Nevertheles...
