API Security Weekly: Issue #114

4 years ago dzone.com

Summary: This is a summary of an article originally published by the source. Read the full original article here →

This week, we check out the API aspects of the recent SolarWinds and PickPoint breaches. Also, we have a review on how to shift API security left with GitHub and 42Crunch and an introduction video on GraphQL security.

It was a supply chain attack in which hackers (likely a state actor) managed to add their backdoor in one of the DLL files of SolarWind’s IT monitoring and management software, Orion.

To avoid such vulnerabilities: Security issues are much cheaper to catch and fix early in the development cycle, and API security is not an exception.

DevOps Articles