“A legitimate API key exploited access no one revoked — because the attacker signed in with something you issued.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'A legitimate API key exploited access no one revoked — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'A legitimate API key exploited access no one revoked — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.

A legitimate API key exploited access no one revoked — because the attacker signed in with something you issued. — Kai London (Professor Kai London), CISO. Principle 1253 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 3753 Principle 6253 Principle 8753

View in gallery (page 13) · About this book