Nearly 40% of APIs Carry More Than One Authentication Risk at Once — and That Should Change How We Think About the Problem

Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often they show up, publish the percentages, and move on. We just finished our second year running one of those reports — and the most important thing we found wasn’t a percentage. […]

Read the original article: