Loading…
Journal
Perspectives on technology, product work and building for real conditions.
Explore the work
09 entriesWeb & API Security
APIs are at the heart of modern web, mobile, SaaS, cloud, and integration platforms. This guide covers 10 critical API security vulnerabilities organizations should test for in 2026, including broken authorization, authentication weaknesses, resource exhaustion, SSRF, API inventory gaps, and unsafe third-party integrations.
Journal
Prompt injection is one of the most important security risks facing modern Generative AI applications. Learn how direct and indirect prompt injection attacks can manipulate AI systems, expose sensitive information, abuse connected tools, and create real business impact.
AI & Agent Security
AI agents can now plan tasks, call APIs, access data, use external tools, and take actions with limited human involvement. This makes excessive agency a serious security concern, especially when agents are given broad permissions, powerful tools, and too much autonomy.
Supply Chain Security
Modern applications depend on hundreds of third-party libraries and open-source packages. Learn how attackers exploit trusted dependencies, compromise CI/CD pipelines, and turn your software supply chain into an attack vector.
Cloud & Web Security
SSRF can turn a seemingly simple web vulnerability into a serious cloud security risk. Learn how attackers abuse server-side requests to reach internal APIs, cloud metadata services, databases, and other private resources.
API / Business Logic Security
Not every API attack looks malicious. Attackers can abuse legitimate endpoints, valid authentication, and expected parameters to exploit flaws in business rules, workflows, authorization, and transaction logic.
Cybersecurity Services
Understand the differences between Vulnerability Assessment, Penetration Testing, and Red Teaming, and discover which cybersecurity approach is right for your business.
Cloud & Web Security
Cloud environments can become vulnerable without a single line of application code being exploited. Learn how misconfigured IAM, public storage, leaked secrets, exposed databases, and unrestricted services can turn small configuration mistakes into major security incidents.
Web & API Security
Learn what IDOR is, how it works, common examples, potential business impact, and practical security measures to prevent Insecure Direct Object Reference vulnerabilities in web applications and APIs
