API security: Broken access controls, injection attacks plague the enterprise

Nice overview of common flaws and how enterprise admins are trolled.

Source