Enterprises looking to modernize their APIs are increasingly switching from the REST architecture to the open-source data query and manipulation language GraphQL. While the transition makes sense – GraphQL is more flexible, scalable, and easier for developers to use – attackers are also seeing new opportunities for mischief. Developer teams must avoid the mistake many organizations made with Kubernetes: rushing into a new, advantageous, and developer-friendly technology while leaving security considerations on the back burner.
