Vulnerabilities
Broken Object Level Authorization Prevention Checklist for APIs
Most API breaches occur because servers verify user identity but forget to verify object ownership, leaving data exposed to anyone with a predictable ID.
web vulnerabilities
Everything Firewall Chronicle has reported about web vulnerabilities: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
XML External Entity Myths: Why Common XXE Beliefs Fail
Developers often miss XXE risks because they assume modern parsers are safe by default or that input validation alone stops entity expansion attacks.