CloudVector Blog

  BOLA stands for Broken Object Level Authorization (BOLA), the top API security issue of the OWASP API Security Top 10. Some say it is similar in spirit to security issues once called Insecure [...]

As organizations embrace digital transformation initiatives, they are increasingly consuming and exposing APIs that increase their risk surface. The OWASP API Security Top 10 focuses on the [...]

Recently, CloudVector produced a roundtable discussion on the subject of accelerating application development, using the metaphor of a security “pit crew” because for most organizations [...]

2020 Hindsight and 2021 Foresight: Lessons Learned in the Work From Home Era It is hard to believe that it has already (or only?) been a year since a global pandemic forced organizations to adapt to [...]

Amazon Ring APIs suffer from Excessive Data Exposure Amazon’s Ring, the home-security unit, was recently found to expose Personally Identifiable Information (PII) data of their users. As this [...]

API Object Vulnerability In Facebook Pages Allowed Creation of Ghost FB Posts A critical Broken Object Level Authorization vulnerability in Facebook Pages was revealed by security researcher Pouya [...]

API Vulnerabilities at the Center of SolarWinds SUPERNOVA Malware Learn more about SUPERNOVA Malware and how CloudVector can protect against the APIs exploited by the malware The digital world was [...]

API Data Breaches in 2020 As we near the end of Year 2020, it is time for us to look back and review some of the major API-related data breaches and/or data leakage vulnerabilities in the past year. [...]

2020 Hindsight and 2021 Foresight – Lessons Learned and Predictions for the Velocity of Business They say that hindsight is 2020, which has certainly been the case this year. For most [...]

OWASP API Security Top 10 – Broken Function Level Authorization Broken Function Level Authorization is the 5th API Security issue in the list of OWASP API Top 10 Security threats. For other [...]