Webinar Explores How Darknet Data Can Inform API Security
Summary
DarkOwl and Corsha speakers discuss API credential risks, darknet trading and discussion of keys and exploits, and security practices including least privilege, credential rotation, revocation, and monitoring.
Key points
- The speakers describe API secrets as often static, shared, and insufficiently rotated, making exposed credentials useful to attackers.
- They cite Toyota’s disclosure that an API access key had been exposed in a public repository for years, with about 2,900 records exposed.
- They say FTX and 3Commas reported illegitimate transactions using API keys obtained through phishing and information-stealing malware.
- The speakers describe darknet discussions and trade involving API keys, session tokens, API exploitation methods, and related tools.
- Recommended practices include least-privilege API access, credential rotation and revocation, and monitoring where secrets may be exposed or used.
- Corsha’s speaker promotes dynamic machine identity and multi-factor authentication for API clients; DarkOwl’s speaker promotes darknet monitoring.
Article Details
- Topic
- How darknet data can help identify API credential threats and inform API security.
People
Vendors
CorshaMark Turnage, CEO and Co-Founder of DarkOwl, and Anusha Iyer, CTO and Co-Founder of Corsha, discuss how API Security professionals can benefit from darknet data in forming a more comprehensive understanding of maliciousDarkOwlMark Turnage, CEO and Co-Founder of DarkOwl, and Anusha Iyer, CTO and Co-Founder of Corsha, discuss how API Security professionals can benefit from darknet data in forming a more comprehensive understanding of malicious