Issue 229: Incidents with DuoLingo and JumpCloud, FastAPI for APIs, and five best practices
Brief
This week, we have news of two API security incidents: the reported leakage of the data of 2. 6 million DuoLingo users and an incident at JumpCloud that resulted in resetting customer API keys. For the technically minded, we have two guides: the first discusses how to use API keys in an ASP. Net Core application, and the second covers the excellent FastAPI Python framework.
We have an article on five best practices for API security, and once again, we conclude with two articles from Dana Epp.
Incident: Data of 2.6 million DuoLingo platform users leaked
First up this week, we have coverage of the ongoing data leakage affecting users of the DuoLingo language learning platform. According to the report in the Infosecurity Magazine, the personal data of as many as 2. 6 million users has been leaked on a hacking forum.