OWASP API Security Top 10 (2023) with vulnerable code, working fixes and tests in Node.js: BOLA, auth, rate limits, SSRF and ...
In the UK, 32 government services are unavailable as security work takes place, but "this does not mean they were hacked", ...