⤷ Title: Malicious Kong Ingress Controller Image Found on DockerHub
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 09:33:33 +0000
════════════════════════
⌗ Tags: #Security #breach #Cyber Attack #Cybersecurity #DockerHub #Kong Ingress
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 14 Jan 2025 09:33:33 +0000
════════════════════════
⌗ Tags: #Security #breach #Cyber Attack #Cybersecurity #DockerHub #Kong Ingress
Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
Malicious Kong Ingress Controller Image Found on DockerHub
Follow us on Bluesky, Twitter (X) and Facebook at @Hackread
⤷ Title: Certificação Gratuita em Segurança de APIs REST: Securing API Servers
════════════════════════
𐀪 Author: Renato Groffe
════════════════════════
ⴵ Time: Fri, 17 Jan 2025 11:02:04 GMT
════════════════════════
⌗ Tags: #kong #api_security #azure_api_management #api_gateway #rest_api
════════════════════════
𐀪 Author: Renato Groffe
════════════════════════
ⴵ Time: Fri, 17 Jan 2025 11:02:04 GMT
════════════════════════
⌗ Tags: #kong #api_security #azure_api_management #api_gateway #rest_api
Medium
Certificação Gratuita em Segurança de APIs REST: Securing API Servers
No dia 18/12/2024 (quarta-feira) concluí mais um treinamento/certificação da APIsec University: Securing API Servers! Assim como outras…
⤷ Title: [個案學習] API Server 未經授權連線透過Kong API Gateway 的HMAC-Auth快速排除手段
════════════════════════
𐀪 Author: 邱繼平
════════════════════════
ⴵ Time: Tue, 25 Mar 2025 03:01:50 GMT
════════════════════════
⌗ Tags: #api_security #hacking #hmac #kong #http_request
════════════════════════
𐀪 Author: 邱繼平
════════════════════════
ⴵ Time: Tue, 25 Mar 2025 03:01:50 GMT
════════════════════════
⌗ Tags: #api_security #hacking #hmac #kong #http_request
Medium
[個案學習] API Server 未經授權連線透過Kong API Gateway 的HMAC-Auth快速排除手段
這是一篇結合了Mobile APP安全性架構設計探討，將懷疑是異常流量進行解封包剖析之後，利用Kong 的作為API Gateway作為API Server的緩衝架構設計，結合 HMAC Auth Plugin套件與APP 開發人員協作之後，完成一次疑似異常流量的排除故事。
⤷ Title: CVE-2025-1087: Critical Template Injection in Insomnia API Client Enables Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 May 2025 00:42:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #API security #CVE_2025_1087 #Developer Tools #Insomnia #JavaScript RCE #Kong #Template Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 May 2025 00:42:44 +0000
════════════════════════
⌗ Tags: #Vulnerability #API security #CVE_2025_1087 #Developer Tools #Insomnia #JavaScript RCE #Kong #Template Injection
Daily CyberSecurity
CVE-2025-1087: Critical Template Injection in Insomnia API Client Enables Remote Code Execution
CVE-2025-1087: Critical flaw in Kong Insomnia allows template injection and arbitrary code execution. Users urged to update to v11.0.2 immediately.
⤷ Title: Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
════════════════════════
𐀪 Author: Amanuel Eshete
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 22:48:41 GMT
════════════════════════
⌗ Tags: #kong_api_gateway #api_security #openid_connect #microservices #angular
Medium
Solving OIDC Integration Challenges with Kong API Gateway and Angular UI
Integrating OpenID Connect (OIDC) into a microservices platform can feel straightforward — until subtle issues put your UI, APIs, and…
⤷ Title: Why API Gateways Are Critical for Securing Public APIs
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
════════════════════════
𐀪 Author: Charmaine Mangorima
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 19:09:59 GMT
════════════════════════
⌗ Tags: #api_gateway #kong_api_gateway #api #rate_limiting #api_security
Medium
Why API Gateways Are Critical for Securing Public APIs
APIs are the backbone of modern applications, enabling communication between mobile apps, web platforms and backend services. However, when…
⤷ Title: Kong Gateway Veri Düzleminde Gerçek Zamanlı Dolandırıcılık Tespiti: Fraud Guard
════════════════════════
𐀪 Author: Recep Baykara
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:18:53 GMT
════════════════════════
⌗ Tags: #kong_plugin #api_security #fraud_detection #kong_api_gateway
════════════════════════
𐀪 Author: Recep Baykara
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 09:18:53 GMT
════════════════════════
⌗ Tags: #kong_plugin #api_security #fraud_detection #kong_api_gateway
Medium
Kong Gateway Veri Düzleminde Gerçek Zamanlı Dolandırıcılık Tespiti: Fraud Guard
Finansal bir API’nin trafiğini analiz ettiğinizde üç farklı istek profiliyle karşılaşırsınız: meşru kullanıcılar, kötü niyetli botlar ve…
⤷ Title: The consequences of an insecure KongAPI Gateways: A virtual lab exploring security…
════════════════════════
𐀪 Author: Paul Volosen
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 17:27:25 GMT
════════════════════════
⌗ Tags: #api_gateway #api_security #kong_gateway
════════════════════════
𐀪 Author: Paul Volosen
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 17:27:25 GMT
════════════════════════
⌗ Tags: #api_gateway #api_security #kong_gateway
Medium
A virtual lab exploring an insecure Kong API Gateway
An in-depth security analysis of Kong Gateway
⤷ Title: SEO Poisoning & NativeAOT: Unmasking the “Kong RAT” Campaign Targeting IT Professionals
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:13:58 +0000
════════════════════════
⌗ Tags: #Malware #.NET 10.0 NativeAOT #Alibaba Cloud OSS #cyber_espionage #eSentire TRU #FinalShell #infosec #IT security #Kong RAT #malware #SEO Poisoning #Trojanized Installers #Xshell
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 08:13:58 +0000
════════════════════════
⌗ Tags: #Malware #.NET 10.0 NativeAOT #Alibaba Cloud OSS #cyber_espionage #eSentire TRU #FinalShell #infosec #IT security #Kong RAT #malware #SEO Poisoning #Trojanized Installers #Xshell
Daily CyberSecurity
SEO Poisoning & NativeAOT: Unmasking the "Kong RAT" Campaign Targeting IT Professionals
Kong RAT: A year-long SEO poisoning campaign targeting developers with trojanized SSH/VPN tools and .NET NativeAOT stealth. Learn how to stay protected.
⤷ Title: The Real IP Isn’t the Real Caller
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:10:28 GMT
════════════════════════
⌗ Tags: #platform_engineering #api_security #api_gateway #rate_limiting #kong
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:10:28 GMT
════════════════════════
⌗ Tags: #platform_engineering #api_security #api_gateway #rate_limiting #kong
Medium
The Real IP Isn’t the Real Caller
Closing the identity loop for partner rate limits in Kong behind F5
⤷ Title: When the Credentials Live in the IdP, Not Kong
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 09:54:56 GMT
════════════════════════
⌗ Tags: #platform_engineering #kong #api_security #zitadel #openid_connect
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 09:54:56 GMT
════════════════════════
⌗ Tags: #platform_engineering #kong #api_security #zitadel #openid_connect
Medium
When the Credentials Live in the IdP, Not Kong
Zitadel tokens in Kong: per-route scopes, tier quotas and the revocation window
⤷ Title: Two Credential Bridges: Verifying Against Apigee or Holding Credentials in Kong
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 05:46:36 GMT
════════════════════════
⌗ Tags: #kong #api_security #apigee #platform_engineering #api_gateway
════════════════════════
𐀪 Author: Shubhojit Dasgupta
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 05:46:36 GMT
════════════════════════
⌗ Tags: #kong #api_security #apigee #platform_engineering #api_gateway
Medium
Two Credential Bridges: Verifying Against Apigee or Holding Credentials in Kong
Moving partners onto Kong before their Apigee credentials change: verify the key at Apigee, or hold it in Kong