Tag feed

#api-security

227 posts61 followers

Explore Hashnode

Alternatives

Trending tags this week

MTMuhammad Tahirmtdeveloper.hashnode.dev5d ago · 12 min read

Zero-Trust API Security: OAuth 2.1, Distributed Rate Limiting, and Automated Threat Mitigation

This article was originally published on Muhammad Tahir's Portfolio. Introduction & Industry Context The modern digital ecosystem in 2026 is defined by decentralized networks, globally distributed edg

0

AArshadblog.arshadakl.inSep 5 · 6 min read

How a Profile Update Feature Could Drain a Company's Bank Account

I was looking at one of the most normal features you can find in almost any application: Update Profile. Nothing exciting. A user changes their name, profile picture, maybe email, and the backend upda

0

AArshadblog.arshadakl.inSep 3 · 8 min read

OTP Bypass : When Client-Side Validation Becomes a Joke

OTP flows make developers feel safe. They look secure. They feel secure. They even demo well. But here’s the uncomfortable part: sometimes an OTP flow can become almost useless if the actual security

0

Cchaitalisinghaniacybersecuritydigest.hashnode.devSep 1 · 5 min read

API Penetration Testing vs Web Application Penetration Testing

Modern applications are a network of APIs; APIs tend to connect the user, service, database, and even external/ third-party software. APIs need to be secure because of the level of access and control

0

JSJaber Saidjabersaid.hashnode.devAug 31 · 20 min read

I Built a Prompt That Makes AI Agents Harden Any Web App Against Bot Abuse — Here's the Full System, the Tests, and What I Learned

How suspicious traffic on my production sites led me to build a universal, framework-agnostic abuse deterrence system that any AI coding agent can implement — and the verification tests that proved my

0

CSConverge Solutionconvergesol.hashnode.devAug 31 · 5 min read

What Makes ASP.NET Core APIs Secure in Production?

Securing an ASP.NET Core API isn't simply about adding JWT authentication and enabling HTTPS. Once an API becomes part of a larger application ecosystem, it may communicate with web and mobile clients

0

CDCoding Dropletscodingdroplets.comAug 30 · 10 min read

Preventing Path Traversal in ASP.NET Core File Download APIs

Every API that serves a file eventually grows an endpoint that takes a filename from the client. It ships as a two-line convenience, it works, and it becomes the most dangerous route in the service. P

0

SSSandra Sydneysandrasydney.hashnode.devAug 24 · 3 min read

Tier-1 SOC Playbook: Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61

Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61 This standard operating playbook defines the containment protocol for neutralizing high-impact REST API security incidents

0

Ccontactpykero.hashnode.devAug 23 · 6 min read

Rate Limiting AI Features: Stop One User From Draining Your Budget

Rate-limit AI features at the user, session, and endpoint level, not just by trusting your LLM provider's account-wide API limit. A single compromised account, a scraping bot, or a client-side bug tha

0

CDCoding Dropletscodingdroplets.comAug 22 · 10 min read

Securing an MCP Server in ASP.NET Core: OAuth, Scopes and Tool Authorization

The thing that makes MCP servers so quick to build is also what makes them dangerous. You decorate a method, the SDK generates a tool definition, and a language model somewhere can now invoke it. That

0

#api-security

Search Hashnode

#api-security

Explore Hashnode

Trending tags this week

Zero-Trust API Security: OAuth 2.1, Distributed Rate Limiting, and Automated Threat Mitigation

How a Profile Update Feature Could Drain a Company's Bank Account

OTP Bypass : When Client-Side Validation Becomes a Joke

API Penetration Testing vs Web Application Penetration Testing

I Built a Prompt That Makes AI Agents Harden Any Web App Against Bot Abuse — Here's the Full System, the Tests, and What I Learned

What Makes ASP.NET Core APIs Secure in Production?

Preventing Path Traversal in ASP.NET Core File Download APIs

Tier-1 SOC Playbook: Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61

Rate Limiting AI Features: Stop One User From Draining Your Budget

Securing an MCP Server in ASP.NET Core: OAuth, Scopes and Tool Authorization