Shadow, Zombie and Misconfigured APIs Are a Security Issue

3 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

Shadow APIs are a problem that not everyone takes seriously. Only 11% of people surveyed for Salt Security’s State of API Security Q3 2021 are greatly concerned about the security risks of shadow or unknown APIs. In contrast, 42% are greatly worried about zombie APIs, which were assumed to be turned off but can be targeted for an account takeover.

Every unaccounted API adds to that problem, but so do APIs that that are documented incorrectly. Perhaps the easiest thing to do going forward is to remind everyone that zombie APIs are really just a category of shadow APIs.

DevOps Articles