“A legitimate API key needed no exploit, only an identity — because the attacker signed in with something you issued.”

— Professor Kai London, CISO.

Quote card by Professor Kai London reading 'A legitimate API key needed no exploit, only an identity — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.
Quote card by Professor Kai London reading 'A legitimate API key needed no exploit, only an identity — because the attacker signed in with something you issued.'. From the book The Breach Had Permission.

A legitimate API key needed no exploit, only an identity — because the attacker signed in with something you issued. — Kai London (Professor Kai London), CISO. Principle 2348 of 10000 from the book “The Breach Had Permission” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk

Related: Principle 4848 Principle 7348 Principle 9848

View in gallery (page 24) · About this book