What Stranger Things Teaches Us About API Security | Teresa Pereira скачать в хорошем качестве

What Stranger Things Teaches Us About API Security | Teresa Pereira

In one of the most creative talks at APISECCON 2026, Teresa Pereira from Siemens Energy's Threat Intelligence team maps the world of Stranger Things onto 11 real API security lessons — because sometimes a sci-fi horror show explains enterprise security better than a textbook. Teresa is a former KPMG Portugal red teamer, DEFCON competition finalist, APIsec University Ambassador, and API Security Person of the Year. Her signature sign-off: "APIs can be open windows, even when the doors are locked." The 11 lessons cover: why breaches happen when you least expect them (have monitoring in place); how attackers chain multiple API vulnerabilities rather than exploiting just one; vulnerability chaining illustrated by her real-world Portuguese bank pen test; social engineering as an API attack vector; insider threats; third-party API breach origins; vulnerabilities that existed long before discovery; why temporary fixes become permanent problems; API security as a team sport; adopting the attacker mindset; and why training transforms teams into security champions. She shares the story of a real pen test where she chained a base64-encoded credential in a public web form header to gain access to 60,000+ customer records in a banking CRM. #APISecurity #PenTesting #BugBounty #CyberSecurity #StrangerThings #APISECCON