Issue 263: Trellix & Aviatrix API exploits, API risks in education, API configuration bugs & secure coding practices
Brief
This week, we have an interesting article on the dangers of API integrations in the education sector, and we cover recent incidents involving API vulnerabilities in two popular security platforms from Trellix and Aviatrix. We highlight a recent article by NordicAPIs on API misconfiguration vulnerabilities, and we share a useful list of recommended coding practices to remove common API vulnerabilities.
Article: Universities are vulnerable to API attacks
APIs are the backbone of integrations between diverse systems and applications, providing a standardized framework for data sharing.
This article explores the risks associated with API integrations in the education sector. It talks about APIs consolidating data from multiple sources into a single unified experience, to benefit students’ productivity. But, poorly implemented integrations can introduce vulnerabilities.