Dana Epp's Blog
Security (de)engineering for fun and profit
How to use OWASP guidance as your API security testing blueprint.