Opinion: Gaping Holes in Security of APIs

The article explains how REST/JSON APIs have become central to modern business strategy while warning that poorly designed APIs create significant security risks. It outlines challenges such as legacy security tools struggling with JSON/REST payloads and URL paths, potential for untrusted data to reach backend services or browsers, and availability issues from chatty or abusive API usage, framing these as broad concerns rather than describing any specific cyber incident.