Unrestricted Access to Sensitive Business Flows incident response playbook · Cybersecurity Atlas
Unrestricted Access to Sensitive Business Flows
HighAPI SecurityAPI6:2023 – Unrestricted Access to Sensitive Business Flows
An API exposes a legitimate business operation without sufficient anti-automation controls, allowing abuse such as bulk purchasing, fake account creation, spam, scraping, or reservation hoarding.
Immediate Response
1Throttle the abused workflow using account, device, and transaction signals.
2Pause suspicious transactions and preserve evidence for fraud review.
3Invalidate automation-created sessions or accounts after verification.
