API Vulnerability

Created: 2022-07-13
Tags: #fleeting

In 2022
Dependancy of the use of API has increased enormously.

API provides

• convenient building blocks for cloud services
• also provides access to highly sensitive data (favorite part of attackers)

Living off the land Attack
Attackers take advantage of the way API Works, rather than any exploit/vulnerability
https://encyclopedia.kaspersky.com/glossary/lotl-living-off-the-land/

Organisations resorts to
Intrusion Prevention Systems (IPS)
WAFs (Next gen firewalls)
Bot Mitigation

Organisations having faith on mentioned tools above leaves them vulnerable of attacks

https://www.idgconnect.com/article/3665142/hacking-the-cloud-why-apis-are-now-a-top-threat.html