API2:2023 — Broken Authentication
Verified by Precogs Threat Research
What is API Broken Authentication?
Authentication mechanisms in APIs are often implemented incorrectly, allowing attackers to compromise authentication tokens or exploit implementation flaws to assume other user's identities.
Impact
Enables complete account takeover. API tokens are often long-lived, use insecure transmission, and lack rotation. JWT implementation flaws are particularly common.
How Precogs AI Addresses API2
Precogs AI identifies JWT implementation flaws, missing token validation, insecure token storage, and authentication bypass patterns in API source code and compiled applications.