This follows what I am seeing in tests. Far fewer injection vulnerabilities, far more aurh issues. The apps didn't change, the attackers got better.

https://stateofsecurity.com/identity-security-is-now-the-1-attack-vector-and-most-organizations-are-not-architected-for-it/

#auth #vector