AUTHORIZATION VULNERABILITIES IN PUBLIC APIS ARE SHOCKINGLY COMMON

Summary from the TLDR InfoSec newsletter

Intruder ran its Autoswagger tool against targets from several large bug bounty programs - and came back with exposed credentials in APIs offered by Microsoft and other massive companies. See the examples and