Blog

Field notes on application security.

How-tos, research, and lessons on securing APIs, AI, and the modern application surface.

Bashar Abouseido, former Charles Schwab CISO, with the headline Hyper offense needs hyper defense.

October 28, 2026

Hyper Defense: Why Patching Faster Won't Stop AI-Speed Attacks

Former Charles Schwab CISO Bashar Abouseido explains why AI-driven attacks demand hyper defense, and why exploitability, not patch speed, sets priorities.

6 min

November 22, 2021

How an API Flaw Exposed Symantec Certificates

APIsec strengthens Sunwest Bank’s API testing with full coverage and real-time risk insights, enabling faster deployment and proactive protection of sensitive data.

November 18, 2021

How Hackers Target Outlook Accounts And How to Protect Yours

How a single compromised support credential led to the Outlook breach — exposing API role mapping flaws that let attackers send, delete, and forward emails.

November 11, 2021

5 Billion Records From 6,500 Data Breaches Exposed in 2018

In this blog post, we will highlight the enormous impact of data breaches in 2018 as well as the status of GDPR violation since this guideline came into effect in May 2018.

October 30, 2021

What Is OWASP API Security Top 10: A Deep Dive

Supreme Lending strengthened API security with APIsec’s continuous testing, ensuring real-time coverage and protection in a regulated industry.