A DoD Contractor’s API Flaw Exposed Military Course Data and Service Member Records

CyberScoop – A defense technology company with Department of Defense contracts exposed user records and military training materials through API endpoints that lacked meaningful authorization checks, according to an account published by Strix, an open-source autonomous security testing project.