by If you use WordPress, check if the REST API endpoint of WordPress is openly sharing usernames at your_domain/wp-json/wp/v2/users.
For more details on this vulnerability as well as practical tips what you can do about it, see details in this write-up in Security Boulevard.
This is great, because it means you can access high-quality security content from the comfort (and safety) of your own home.
Jaikumar Vijayan has compiled a list of 30 recent application security stats, and one of them is on API security: “37%: Percentage of respondents who said API security is their top priority for cloud-native apps”