{"id":6035,"date":"2023-01-16T08:30:14","date_gmt":"2023-01-16T13:30:14","guid":{"rendered":"https:\/\/nexela.wpenginepowered.com\/?p=6035"},"modified":"2023-03-20T15:24:04","modified_gmt":"2023-03-20T19:24:04","slug":"what-twitters-api-breaches-mean-for-cybersecurity-trends","status":"publish","type":"post","link":"https:\/\/nexela.com\/?p=6035","title":{"rendered":"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends"},"content":{"rendered":"

Back in December of 2021, an API vulnerability impacting Twitter was disclosed. Just a few months later, in July, data from more than 5.4 million users\u2014obtained through this vulnerability\u2014was put up for sale, and more recently, another hacker shared the data online. Let\u2019s take the opportunity to examine the concept of an API attack, and what can and should be done to stop them.<\/p>\n

<\/p>\n

To begin, let\u2019s review what an API, and an API attack, really is.<\/p>\n

An API\u2014Application Programming Interface\u2014Enables Communication Between Programs<\/h2>\n

All an API really is, is a bit of code that allows the applications we all rely on to connect to the Internet in a secure and standardized way. Sending a friend a payment through a money sharing application? There\u2019s an API involved. Adjusting a smart appliance through an app? Thanks, API!<\/p>\n

The process works as follows:<\/p>\n

    \n
  1. You send a command to an application on your mobile device.<\/li>\n
  2. The application connects to the Internet to share the data contained in the command.<\/li>\n
  3. A server receives the data, interprets it, and carries out the appropriate actions<\/li>\n
  4. Your mobile device receives the data back and presents it to you.<\/li>\n<\/ol>\n

    Today, APIs are largely standardized, which generally makes them more secure\u2014your device and the server powering the online service are only communicating the absolutely necessary information between them.<\/p>\n

    Twitter\u2019s API Vulnerability Removed this Separation<\/h3>\n

    An exploit was present in one of Twitter\u2019s APIs that ultimately allowed hackers to identify who owned Twitter accounts by submitting email addresses or mobile phone numbers to the API\u2014and by the time the vulnerability was fixed in January of 2022, the damage was already done.<\/p>\n

    API Attacks are a Big Deal<\/h2>\n

    Twitter is far from the only example of an API attack, with the vast majority of businesses encountering security problems as a result of these interfaces, a sizable chunk of those suffering a data breach as a result. It is because APIs are inherently trusting of systems that try to connect to them\u2014and so, if an attacker gets access to an API, they have an expressway right into that organization\u2019s databases.<\/p>\n

    Once they have access to this data, an attacker can then use it as ammunition to improve their social engineering efforts.<\/p>\n

    How to Avoid the Impacts of API Attacks<\/h3>\n

    The key to avoiding API attacks is to teach your team about them, largely by helping them to identify various scams like phishing before this kind of information is successfully exfiltrated from your business. In short, you need to make sure that they can identify phishing attacks, and that a variety of other security measures are in place, like two-factor authentication and sufficient password practices.<\/p>\n

    We\u2019re Here to Help You Maintain Your Security<\/h2>\n

    Reach out to Nexela at (215) 525-3223 to learn more about how we can help you protect your business\u2019 operations.<\/p>\n","protected":false},"excerpt":{"rendered":"

    Back in December of 2021, an API vulnerability impacting Twitter was disclosed. Just a few months later, in July, data from more than 5.4 million users\u2014obtained through this vulnerability\u2014was put up for sale, and more recently, another hacker shared the data online. Let\u2019s take the opportunity to examine the concept of an API attack, and what can and should be done to stop them.<\/p>\n","protected":false},"author":4,"featured_media":6034,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50,61],"tags":[83,67,129],"class_list":["post-6035","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-security","tag-hackers","tag-security","tag-social-media"],"yoast_head":"\nWhat Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nexela.com\/?p=6035\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela\" \/>\n<meta property=\"og:description\" content=\"Back in December of 2021, an API vulnerability impacting Twitter was disclosed. Just a few months later, in July, data from more than 5.4 million users\u2014obtained through this vulnerability\u2014was put up for sale, and more recently, another hacker shared the data online. Let\u2019s take the opportunity to examine the concept of an API attack, and what can and should be done to stop them.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nexela.com\/?p=6035\" \/>\n<meta property=\"og:site_name\" content=\"| Philadelphia, PA | Nexela\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/PhiladelphiaITsupport\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-16T13:30:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-20T19:24:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nexela.com\/wp-content\/uploads\/API_298023570_400.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Eric Disengof\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@NexelaInc\" \/>\n<meta name=\"twitter:site\" content=\"@NexelaInc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eric Disengof\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nexela.com\/?p=6035\",\"url\":\"https:\/\/nexela.com\/?p=6035\",\"name\":\"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela\",\"isPartOf\":{\"@id\":\"https:\/\/nexela.com\/#website\"},\"datePublished\":\"2023-01-16T13:30:14+00:00\",\"dateModified\":\"2023-03-20T19:24:04+00:00\",\"author\":{\"@id\":\"https:\/\/nexela.com\/#\/schema\/person\/5435031473121f8542dd2002ae241a9d\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nexela.com\/?p=6035\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nexela.com\/#website\",\"url\":\"https:\/\/nexela.com\/\",\"name\":\"| Philadelphia, PA | Nexela\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nexela.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/nexela.com\/#\/schema\/person\/5435031473121f8542dd2002ae241a9d\",\"name\":\"Eric Disengof\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nexela.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/85f06e5e0c52138765f1a62466ec5a0779caee9daf1f1a3e2eca775fef7006e2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/85f06e5e0c52138765f1a62466ec5a0779caee9daf1f1a3e2eca775fef7006e2?s=96&d=mm&r=g\",\"caption\":\"Eric Disengof\"},\"url\":\"https:\/\/nexela.com\/?author=4\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nexela.com\/?p=6035","og_locale":"en_US","og_type":"article","og_title":"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela","og_description":"Back in December of 2021, an API vulnerability impacting Twitter was disclosed. Just a few months later, in July, data from more than 5.4 million users\u2014obtained through this vulnerability\u2014was put up for sale, and more recently, another hacker shared the data online. Let\u2019s take the opportunity to examine the concept of an API attack, and what can and should be done to stop them.","og_url":"https:\/\/nexela.com\/?p=6035","og_site_name":"| Philadelphia, PA | Nexela","article_publisher":"https:\/\/www.facebook.com\/PhiladelphiaITsupport","article_published_time":"2023-01-16T13:30:14+00:00","article_modified_time":"2023-03-20T19:24:04+00:00","og_image":[{"width":400,"height":400,"url":"https:\/\/nexela.com\/wp-content\/uploads\/API_298023570_400.jpg","type":"image\/jpeg"}],"author":"Eric Disengof","twitter_card":"summary_large_image","twitter_creator":"@NexelaInc","twitter_site":"@NexelaInc","twitter_misc":{"Written by":"Eric Disengof"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nexela.com\/?p=6035","url":"https:\/\/nexela.com\/?p=6035","name":"What Twitter\u2019s API Breaches Mean for Cybersecurity Trends | Philadelphia, PA | Nexela","isPartOf":{"@id":"https:\/\/nexela.com\/#website"},"datePublished":"2023-01-16T13:30:14+00:00","dateModified":"2023-03-20T19:24:04+00:00","author":{"@id":"https:\/\/nexela.com\/#\/schema\/person\/5435031473121f8542dd2002ae241a9d"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nexela.com\/?p=6035"]}]},{"@type":"WebSite","@id":"https:\/\/nexela.com\/#website","url":"https:\/\/nexela.com\/","name":"| Philadelphia, PA | Nexela","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nexela.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/nexela.com\/#\/schema\/person\/5435031473121f8542dd2002ae241a9d","name":"Eric Disengof","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nexela.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/85f06e5e0c52138765f1a62466ec5a0779caee9daf1f1a3e2eca775fef7006e2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/85f06e5e0c52138765f1a62466ec5a0779caee9daf1f1a3e2eca775fef7006e2?s=96&d=mm&r=g","caption":"Eric Disengof"},"url":"https:\/\/nexela.com\/?author=4"}]}},"_links":{"self":[{"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/posts\/6035","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/nexela.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6035"}],"version-history":[{"count":0,"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/posts\/6035\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nexela.com\/index.php?rest_route=\/wp\/v2\/media\/6034"}],"wp:attachment":[{"href":"https:\/\/nexela.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6035"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nexela.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6035"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nexela.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6035"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}