⤷ Title: Mimari Yanılgılar: APIM Key Sızıntısı ve Kısıtlanmamış JWT İle Zafiyet Zinciri (Vulnerability…
════════════════════════
𐀪 Author: Ali
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 16:39:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #responsible_disclosure #web_application_security #api_security
════════════════════════
𐀪 Author: Ali
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 16:39:22 GMT
════════════════════════
⌗ Tags: #cybersecurity #responsible_disclosure #web_application_security #api_security
Medium
Mimari Yanılgılar: APIM Key Sızıntısı ve Kısıtlanmamış JWT İle Zafiyet Zinciri (Vulnerability Chaining)
Sorumlu Bildirim (Responsible Disclosure) Notu
⤷ Title: GraphQL Vulnerability Scanner
════════════════════════
𐀪 Author: Spydomain1
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 07:53:26 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #graphql
════════════════════════
𐀪 Author: Spydomain1
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 07:53:26 GMT
════════════════════════
⌗ Tags: #owasp_api_security_top_10 #api_security #graphql
Medium
GraphQL Vulnerability Scanner
video and github link
⤷ Title: Frontend ↔ Backend Communication: A Security-Focused Guide
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:01:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #api_security #web_security
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:01:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #penetration_testing #api_security #web_security
Medium
Frontend ↔ Backend Communication: A Security-Focused Guide
A practical reference for Web Pentesting and Bug Bounty Hunting
⤷ Title: Lab: Performing CSRF exploits over GraphQL #lab5
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:03:59 GMT
════════════════════════
⌗ Tags: #web_hacking #api_security #portswigger_lab #graphql #csrf
════════════════════════
𐀪 Author: PRiTi.EX
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 09:03:59 GMT
════════════════════════
⌗ Tags: #web_hacking #api_security #portswigger_lab #graphql #csrf
Medium
Lab: Performing CSRF exploits over GraphQL #lab5
This labs takes my time because i stuck in that URL encode part so lets starts how i solved this lab.
⤷ Title: Are AI agent skills free? Check the API key behind them first
════════════════════════
𐀪 Author: Skillselion.com
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:24:30 GMT
════════════════════════
⌗ Tags: #api_security #claude_code #ai_agent
════════════════════════
𐀪 Author: Skillselion.com
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 12:24:30 GMT
════════════════════════
⌗ Tags: #api_security #claude_code #ai_agent
Medium
Are AI agent skills free? Check the API key behind them first
Most priced AI agent skills cost nothing to run. In Skillselion’s pricing census of October 16, 2026, 70.4% of the 4,902 skills that carry…
⤷ Title: 10 Rate-Limiting Mistakes That Leave Your Backend Exposed
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 13:22:05 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #web_development #backend_development
════════════════════════
𐀪 Author: TechByRahmat
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 13:22:05 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #web_development #backend_development
Medium
10 Rate-Limiting Mistakes That Leave Your Backend Exposed
Your API can have authentication, input validation, and a solid database architecture and still be vulnerable to abuse if you get rate…
⤷ Title: BOLA: The API Flaw Hiding in Plain Sight
════════════════════════
𐀪 Author: Dishanevare
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:44:35 GMT
════════════════════════
⌗ Tags: #api_security #idor_vulnerability #bola #owasp_api_security_top_10
════════════════════════
𐀪 Author: Dishanevare
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:44:35 GMT
════════════════════════
⌗ Tags: #api_security #idor_vulnerability #bola #owasp_api_security_top_10
Medium
BOLA: The API Flaw Hiding in Plain Sight
Broken Object Level Authorization (BOLA) is the number one risk in the OWASP API Security Top 10. It is simple to exploit, hard to detect…
⤷ Title: Chatbot Security: What I Changed Before a Client Demo
════════════════════════
𐀪 Author: Biplove Yadav
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:18:51 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #chatbots #artificial_intelligence
════════════════════════
𐀪 Author: Biplove Yadav
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:18:51 GMT
════════════════════════
⌗ Tags: #software_engineering #api_security #cybersecurity #chatbots #artificial_intelligence
Medium
Chatbot Security: What I Changed Before a Client Demo
Login gates, role checks, internal routes and the limits of a deployment-hardening pass.
⤷ Title: JWT Security 101: Verification vs. Authorization
════════════════════════
𐀪 Author: Rishabh Raj Singh
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 21:54:49 GMT
════════════════════════
⌗ Tags: #backend_development #web_security #jwt #security #api_security
════════════════════════
𐀪 Author: Rishabh Raj Singh
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 21:54:49 GMT
════════════════════════
⌗ Tags: #backend_development #web_security #jwt #security #api_security
Medium
JWT Security 101: Verification vs. Authorization
The most common JWT misconception, what signature verification actually proves, and the gaps that let valid tokens attack real systems.
⤷ Title: Twenty Security Checks Before Your MCP Server Goes Public
════════════════════════
𐀪 Author: Camp
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 02:17:43 GMT
════════════════════════
⌗ Tags: #mcp_server #ai_agent #api_security #model_context_protocol #security
════════════════════════
𐀪 Author: Camp
════════════════════════
ⴵ Time: Sat, 17 Oct 2026 02:17:43 GMT
════════════════════════
⌗ Tags: #mcp_server #ai_agent #api_security #model_context_protocol #security
Medium
Twenty Security Checks Before Your MCP Server Goes Public
An MCP server is effectively an API that agents call for people, and that gives it an unusual set of risks. The caller is a model that text…