Certificate Pinning Bypass Techniques in Mobile API Clients
Attackers can bypass mobile certificate pinning by targeting the trust-decision layer.
Mei-Xing Callahan
Mei-Xing Callahan
4 stories
Broken Cryptography in Custom Token and License Key Schemes
Developers misconfigure cryptography in custom schemes, creating predictable attack paths.
Mei-Xing Callahan
Privilege Escalation via Mass Assignment in REST APIs
Attackers can gain admin access by injecting privileged fields into REST API requests.
Mei-Xing Callahan
Software and Data Integrity Failures in CI/CD Pipelines
One compromised credential can traverse the entire pipeline without verification.
Mei-Xing Callahan