Topic

#Api Security

10 articles on Api Security — news, releases, guides and analysis from the SourceFeed engine.

Article 2w ago 0

One Parent Path Unlocked 676,000 Connected Trucks

This wasn't car hacking. It was default-allow authorization on a REST API, and no vehicle regulation catches that.

Emeka Okafor

676,000 Trucks Behind an API With No Auth

VECV patched in 17 days, but the architecture that made full takeover trivial is everywhere.

Article · 2w ago5

Build a Secure Express API with Helmet, Zod, and Rate Limiting

Scaffold an Express 5 REST API with security headers, schema validation, and request throttling built in.

Tutorial · 2w ago0

Issue HMAC-Signed, Scoped API Keys for a Public REST API

Replace static bearer tokens with per-client HMAC request signing, scoped permissions, and replay protection in Node.js.

Tutorial · 3w ago0

Enforce Fine-Grained Authorization with Open Policy Agent and Rego

Write, test, and serve a real Rego policy for role-based access control, ownership overrides, and data classification, then wire it into a Node middleware layer the way a gateway would.

Tutorial · 1mo ago0

Prompt Injection Is the Least of Your AI Security Problems

Real-world attacks reveal that while frontier models can resist linguistic trickery, your glue code and infrastructure are wide open.

Article · 1mo ago1

The Client-Side Illusion: Lessons from the J&J Web App Vulnerabilities

Relying on frontend SSO flows without backend token validation is a recipe for trivial administrative takeovers.

Article · 1mo ago0

The OAuth Supply Chain: Lessons From the LastPass Breach

A third-party OAuth compromise exposes customer data, highlighting the critical need for strict API token scoping and zero-trust integrations.

Article · 1mo ago4

Cloudflare opens self-service OAuth to every developer

Scoped, revocable delegated access finally replaces pasted API tokens for anyone building on Cloudflare's platform.

Article · 1mo ago4

1,000 Breaches In, and Companies Are Taking Longer Than Ever to Tell You

Troy Hunt's Have I Been Pwned milestone exposes a darkening pattern: breach victims — and the developers who depend on breached services — are flying blind for weeks while data circulates freely on hacking forums.

Article · 2mos ago0