API 3 Mobile Application Attack Surface: Android and iOS Sep 20, 2026 WebSockets, gRPC and GraphQL Authorization Sep 20, 2026 API Authorization: BOLA, BFLA and Mass Assignment Sep 20, 2026