Issue 283: AI Security Solutions, Formula 1’s API Flaw, Latest OWASP Authorization Incidents
Brief
This week, our theme is API authorization vulnerabilities. We cover critical issues discovered in the WSO2 API Manager and the Better-Auth plugin, share an eye-opening BOPLA vulnerability in a Formula 1 registration API, and examine familiar API security flaws appearing more often in industrial devices.
We also highlight a recent interview with former CISA director Jen Easterly about the potential, and risks, of using AI to solve today’s security challenges.
Article: Is AI the silver bullet for software vulnerabilities?
In a recent article, former CISA Director Jen Easterly highlights some uncomfortable truths:
“The common factors uncovered by MITRE nearly 20 years ago – cross-site scripting, memory unsafe coding, SQL injection, directory traversal – remain part and parcel of shipped software.”
This aligns closely with our research at APISecurity. io.