SOME APIS KEEP SECRETS. YOURS MIGHT NOT.

Summary from the TLDR InfoSec newsletter

Three years after the Optus breach exposed millions of customer records, Intruder's [13] research team went hunting for the same broken API authorization flaws. They found: