API Security

Unrestricted Resource Consumption in APIs

Unrestricted API resource consumption can cause outages, costs, and security risks. Learn causes, examples, business impact, and key prevention steps.

JSON API DoS Attacks

Learn how JSON API DoS attacks overwhelm servers with malicious payloads, their business impact, and key defenses like rate limiting, WAFs, and validation.

Invalid RFC

Learn what RFC compliance means for web applications, why violations lead to security risks, and how ensuring compliance protects performance and reputation.

Insecure Design

Learn what insecure design is in web applications and APIs, how it leads to vulnerabilities, real-world examples, business risks, and how to prevent it.

Broken Object Property Level Authorization in APIs

Learn what broken object property level authorization is, how it happens, its business risks, and how Vercara strengthens API security to prevent it.

Broken Authentication in APIs

Check-in automation abuse uses bots to manipulate airline check-in systems, reserving seats or gaining unfair advantages, disrupting operations, and causing delays.

May 20, 2025

Vercara’s Open-Source Intelligence (OSINT) Report – May 9 – May 15, 2025

Weekly OSINT highlights include botnet takedowns, IoT proxy abuse, JPG-based ransomware, and a critical Node.js denial-of-service flaw.

May 14, 2025

Vercara’s Open-Source Intelligence (OSINT) Report – May 1 – May 9, 2025

Weekly OSINT: npm backdoor hits 3,200 users, SAP flaw exploited by SuperShell, FreeDrain SEO scams, and Europol busts DDoS-for-hire ops.

April 24, 2025

How Enterprises Can Implement API Threat Detection and Response

Protect APIs from threats with real-time monitoring, automated response, and API security best practices to reduce risk and downtime.

April 7, 2025

Vercara’s Open-Source Intelligence (OSINT) Report – March 28 – April 3, 2025

Weekly OSINT highlights: Discover how attackers are using MU-Plugins, DNS-over-HTTPS, and advanced loaders to evade detection and deploy malware.

April 2, 2025

Vercara’s Open-Source Intelligence (OSINT) Report – March 21 – March 27, 2025

Weekly OSINT highlights: Meerkat phishing mimics 114 brands, 150K sites hacked, RedCurl ransomware, and npm package backdoors.

March 19, 2025

Vercara’s Open-Source Intelligence (OSINT) Report – March 7 – March 13, 2025

This week's OSINT Report highlights major cyber threats: Dark Storm’s DDoS claims, Ballista botnet infections, SSRF exploits, and a new polymorphic attack cloning browser extensions.

Vercara Resources

API Security Resources

Vercara: A Leader in Securing Online Experiences

Webinar: WAAP is Here to Stay: Combining API Protection and Cloud Application Security

Weekly Updates on the Cyber Threat Landscape

Cybersecurity Insights That Are Ahead of the Curve

Weekly Updates on the Cyber Threat Landscape

Cybersecurity Insights That Are Ahead of the Curve

Weekly Updates on the Cyber Threat Landscape

Cybersecurity Insights That Are Ahead of the Curve