4 posts tagged this topic.
A refactor made a branch entity canonical across tenant workspaces so it could belong to several at once — but the balance queries that filtered on its id kept summing every workspace's top-ups and usage together, so a workspace with no billing connection configured still saw another tenant's budget on its dashboard.
Auditing 263 API routes for AI spend found three image- and video-generation endpoints gated only by 'is this user logged in.' Any tier, any role, any tenant could burn two paid providers with no cap and no way to tell whose bill it was.
Fixing a cross-tenant IDOR taught me that 'access denied' and 'does not exist' are the same message when the requester should never learn which one is true.
AIDA classifies support tickets with an LLM, so the classifier has to treat every ticket as a potential attack. The fence around the ticket text is real, but it isn't the guarantee — the guarantee is that a successful attack still can't do anything.