Discover the vulnerabilities of mobile apps and APIs in this 48-minute conference talk from LASCON. Learn about the growing threat of "Shadow APIs" and how hackers exploit these unknown interfaces to extract large volumes of data. Explore a step-by-step method used by attackers to target, connect, and extract information from these hidden APIs. Gain insights into the challenges of securing unknown assets and understand why basic attacks often succeed despite complex security measures. Presented by Igor Matlin, Solution Architect at Data Theorem, this session highlights the importance of identifying and protecting all APIs within an organization's infrastructure. Walk away with a better understanding of modern hacking techniques and the critical need for comprehensive API security strategies.