Skip to content
Free since 2015. Built for the engineers who keep things running.
Join the Slack

cat /articles/shadow-zombie-and-misconfigured-apis-are-a-security-issue.md

Security

Shadow, Zombie and Misconfigured APIs Are a Security Issue

Shadow APIs are a problem that not everyone takes seriously. Only 11% of people surveyed for Salt Security’s State of API Security Q3 2021 are greatly concerned about the security risks of shadow or unknown APIs.

The New Stack05 Aug 2021 · summary
Read on thenewstack.io ↗← All articles

article --summary

The summary

Shadow APIs are a problem that not everyone takes seriously. Only 11% of people surveyed for Salt Security’s State of API Security Q3 2021 are greatly concerned about the security risks of shadow or unknown APIs. In contrast, 42% are greatly worried about zombie APIs, which were assumed to be turned off but can be targeted for an account takeover. Every unaccounted API adds to that problem, but so do APIs that that are documented incorrectly. Perhaps the easiest thing to do going forward is to remind everyone that zombie APIs are really just a category of shadow APIs.

Editorial note: This is a summary of an article first published by The New Stack. The full piece is on their site.

Read original article ↗Explore more articles →

articles --latest

Latest articles

New from the blogs we follow and the community.

All articles
AI & MLOpsAnthropic launches Fable 5.2 with a price cut and stronger coding scoresAnthropic has released Fable 5.2 and Mythos 5.2, with lower token prices, a faster output mode, and benchmark gains in coding, though some rivals still lead on certain tests.The New Stack · 4h ago · 6 min readCloudGoogle claims its new AI software cuts inference latency by over 90% — but there’s a catchGoogle's open-source TPU Sync software aims to speed up AI inference by cutting data-movement delays between memory tiers, with large gains claimed in some tests but notable limits on hardware and maturity.The New Stack · 4h ago · 3 min readAI & MLOpsCursor and Google join OpenAI in giving coding agents a voice. Claude Code stays silent.Cursor and Google have both launched two-way voice features for their coding agents, joining OpenAI, while Anthropic's Claude Code still only accepts spoken input. The piece looks at why the companies think developers want to talk while agents work.The New Stack · 4h ago · 5 min read

newsletter --weekly

DevOps Weekly, minus the noise.

The best reads, new jobs and upcoming events, in one email a week.