Everything RedTeam Log has reported about API security: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in nullclaw NullHub allows attackers to rewrite agent configurations and credentials without any authentication, affecting versions up to 2026.5.29.
Most API failures occur because developers trust client-side input, allowing attackers to manipulate data flow without ever touching the underlying authentication layer.
Identify hidden IDOR flaws by analysing parameter manipulation, session token behaviour and server-side access control logic in real time.