TAB Bank API Security for financial services in an agentic AI world​

What you'll learn

• The attacker’s step-by-step playbook, the way API attacks actually run in the wild
• The most exploited API vulnerabilities in practice, including BOLA, BOPLA, broken auth, mass assignment, and business logic abuse
• The real-world flaws behind the Peloton, Coinbase, and Parler incidents, and why current tooling misses them
• Why WAFs and traditional scanners are not enough, and what shift-left security looks like in practice
• Closing primer on MCP trust boundaries that sets up the afternoon labs

Topics covered