BFLA 2 API Authorization: BOLA, BFLA and Mass Assignment Sep 20, 2026 API Security for Pentesters: BOLA, BFLA and Beyond Jul 3, 2026