“A legitimate API key did not break in — it signed in — because the attacker signed in with something you issued.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'A legitimate API key did not break in — it signed in — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'A legitimate API key did not break in — it signed in — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.

A legitimate API key did not break in — it signed in — because the attacker signed in with something you issued. — Kai London (Professor Kai London), CISO. Principle 2262 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 4762 Principle 7262 Principle 9762

View in gallery (page 23) · About this book