Issue 217: Wordle API exposes answers, Twitter API breach updates, AWS exposed dangerous API
Brief
This week, we have news of three vulnerabilities. The first is a vulnerability affecting the Wordle online puzzle allowing curious users to check solutions and even publish their own puzzles. The second is further coverage of the mass information leak from Twitter, and finally, we have coverage of an AWS IDAM API bypassing central CloudTrail logging.
Finally we have some quick takeaways from a recent Gartner Innovation Insight report.
A message from the editor
The last six weeks have been a period of unprecedented activity for 42Crunch and me: from packed events at Developer Week and OWASP Netherlands to the RSA 2023 conference, where we were guests of both GitHub and Microsoft and preparation for our first in-person API security training in May in Amsterdam. Unfortunately, this has impacted the regular cadence of the APISecurity. io newsletter.