Fortify Your APIs: How BeVigil Secured a Logistics Giant from Critical Vulnerabilities

**CloudSEK's BeVigil discovered a misconfigured Kong API Gateway at a major logistics company where the admin panel on port 8002 was accessible without authentication, exposing configuration details and a super-admin token that was used in a proof-of-concept to create an administrative account, enabling potential full takeover of the gateway and significant data and operational risk.**