API Security Weekly: Issue #139

This article has been indexed from DZone Security Zone

This week, we take a look at the recent API vulnerabilities at Apple, Amazon, and the volunteer coordination app of the Philippine opposition coalition, and there is an upcoming API security webinar by Gartner.

Vulnerability: Apple iCloud Account Takeover

Laxman Muthiyah was able to demonstrate how he could brute-force his way into taking over someone else’s Apple iCloud account by exploiting the password reset API endpoint.

Read the original article: API Security Weekly: Issue #139

Related