Tag feed

#apisecurity

30 posts5 followers

Explore Hashnode

Alternatives

Trending tags this week

SSSandra Sydneysandrasydney.hashnode.dev1d ago · 3 min read

Tier-1 SOC Playbook: Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61

Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61 This standard operating playbook defines the containment protocol for neutralizing high-impact REST API security incidents

0

SSSandra Sydneysandrasydney.hashnode.dev1d ago · 2 min read

Developer Integration Manual: Secure Firewall REST API Gateway

This manual guides developers through authenticating, configuring mandatory security headers, executing rule-creation payloads, and programmatically resolving errors using the Secure Firewall API Gate

0

Ccontactpykero.hashnode.dev3d ago · 6 min read

Rate Limiting AI Features: Stop One User From Draining Your Budget

Rate-limit AI features at the user, session, and endpoint level, not just by trusting your LLM provider's account-wide API limit. A single compromised account, a scraping bot, or a client-side bug tha

0

DJDevy Jonesdevyjones.hashnode.devJul 28 · 5 min read

Finding Exposed APIs and Services: A Practical Guide for Developers (with ScanSearch)

As developers, we're constantly building and deploying services, often exposing APIs to the internet. While necessary, this exposure brings a critical responsibility: ensuring these endpoints are secu

0

PPPrajapati Pareshsmarttechdevs.hashnode.devJul 8 · 3 min read

Stop API Floods: Redis Sliding Window Rate Limits ⚡

The Fixed Window Vulnerability When protecting your SaaS API at Smart Tech Devs, rate limiting is your first line of defense against DDoS attacks and brute-force scraping. The default approach in most

0

MSManuela Schrittwieserneuralstackms.techApr 9 · 14 min read

Secure-by-Design Patterns for LLM-Backend APIs

Standard API security is necessary but not sufficient when your backend is a large language model. LLMs introduce an entirely new attack surface one that lives inside the model's context window. This

6

CISA

TLTanvi Londhetravel-techie.hashnode.devJan 8 · 7 min read

Travel CRM Deep Dive: Architecture, Integration, and Why Generic Solutions Fail

If you've ever worked with travel industry clients, you know they have... unique requirements. Multi-leg bookings spanning continents, complex supplier relationships, seasonal pricing madness, and customers who expect you to remember their hotel pill...

0

AAAbdelrhman Allamsl4x0.xyzDec 23, 2025 · 3 min read

Sanity to Insanity: Chaining Public CMS Misconfigurations to Remote Admin Access on Production

In this write-up, I’m going to show you how I pulled a single loose thread a forgotten JavaScript file on a dev server and unraveled an entire company’s security architecture, achieving full Administrative Account Takeover on their live production en...

0

VPVeronica Petersverawrites.hashnode.devDec 17, 2025 · 13 min read

API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it

Credential exposures are one of the fastest paths to compromise. In 2024 alone, GitHub detected over 39M leaked secrets across its platform, prompting new security protections and organization‑wide scanning features. Independent studies consistently ...

0

IAIsrael Adedamolakamii.hashnode.devNov 20, 2025 · 4 min read

Application Security Audit Report: Architectural Insights & Lessons Learned

1. Abstracted Findings & Security Patterns During the audit of a hybrid-architecture web application, several recurring patterns emerged where functional requirements conflicted with security best practices. The "Trusting Controller" Pattern (Implic...

0

#apisecurity

Search Hashnode

#apisecurity

Explore Hashnode

Trending tags this week

Tier-1 SOC Playbook: Detecting and Containing DDoS & Mass Assignment Attacks using NIST SP 800-61

Developer Integration Manual: Secure Firewall REST API Gateway

Rate Limiting AI Features: Stop One User From Draining Your Budget

Finding Exposed APIs and Services: A Practical Guide for Developers (with ScanSearch)

Stop API Floods: Redis Sliding Window Rate Limits ⚡

Secure-by-Design Patterns for LLM-Backend APIs

Travel CRM Deep Dive: Architecture, Integration, and Why Generic Solutions Fail

Sanity to Insanity: Chaining Public CMS Misconfigurations to Remote Admin Access on Production

API Keys, Tokens & Secrets: How They Leak and How Developers can Avoid it

Application Security Audit Report: Architectural Insights & Lessons Learned