1. Insecure Direct Object Reference: The Authorization Bug Hiding in Plain Sight blog | 2026-05-31 07:00 | bugbunny.ai | original ↗ | #appsec | #vulnerability-research | #access-control
2. API Pentesting and Best Practices blog | 2025-07-29 17:14 | hackerone.com | original ↗ | #api-security | #penetration-testing | #ptaas