Security Boulevard

JULY 29, 2023

Welcome to the 2nd post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you [.] This post will focus on API1:2023 Broken Object Level Authorization.

96

96

The Last Watchdog

NOVEMBER 30, 2021

APIs are the snippets of code that interconnect the underlying components of all the digital services we can’t seem to live without. Indeed, APIs have opened new horizons of cloud services, mobile computing and IoT infrastructure, with much more to come. API vulnerabilities are ubiquitous and multiplying; they’re turning up everywhere.

Big data 226

Big data Digital transformation Accountability Software 226

Security Boulevard

JUNE 7, 2023

As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release seems to retain most of the changes in category naming, language and intent from the 2019 edition which we saw in the RC version. In this post, we are going [.]

Risk 67

Risk 67

The Last Watchdog

JUNE 13, 2022

Related: Taking API proliferation seriously. The top drivers of the continued growth of cybersecurity are: the growing need to protect the API supply chain, the inadequacy of existing identity management systems, and the unfulfilled promise of data-driven AI-powered cybersecurity systems. Securing APIs.

Cybersecurity 239

Cybersecurity Artificial Intelligence Software Marketing 239

Cisco Security

SEPTEMBER 16, 2021

As a proud partner of the Black Hat USA NOC , Cisco deployed multiple technologies along with the other Black Hat NOC partners to build a stable and secure network for the conference. We used Cisco Secure Malware Analytics to analyze files and monitor any potential PII leaks. Umbrella has three API’s: The management API.

DNS 105

DNS Authentication Technology Malware 105

Security Boulevard

OCTOBER 7, 2023

Welcome to the 12th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might [.]

62

62

IT Security Guru

AUGUST 10, 2023

The Open Web Application Security Project (OWASP), a non-profit foundation devoted to web application security, recently released the 2023 OWASP API Security Top 10 list. The list aims to raise awareness about the most common API security risks plaguing organisations and how to defend against them.

Authentication 98

Authentication Risk 98

Security Boulevard

SEPTEMBER 9, 2023

Welcome to the 8th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what [.] This post will focus on API7:2023 Server Side Request Forgery (SSRF).

67

67

Security Boulevard

SEPTEMBER 16, 2023

Welcome to the 9th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. This post will focus on API8:2023 Security Misconfiguration. In this series we are taking an in-depth look at each category – the details, the impact and what you can do [.]

62

62

Security Boulevard

SEPTEMBER 23, 2023

Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can [.] This post will focus on API9:2023 Improper Inventory Management.

62

62

Security Boulevard

APRIL 24, 2023

We’ll get the chance to talk with security leaders about why API security has become a priority project, and we’ll get time to catch up with customers and each other. Today we announced that Salt has won “Hot Company” in the API security category in the Cyber Defense Magazine (CDM) 2023 Global InfoSec Awards.

InfoSec 52

InfoSec Threat Detection Architecture Engineering 52

Adam Levin

APRIL 10, 2019

A security analysis of 30 major banking and financial apps has shown major security holes and a lax approach to protecting user data. Among the most alarming finding was the practice of embedding and hard-coding of private certificates and API keys into banking apps. Read more about their report’s findings here.

Banking 187

Banking Retail Insurance Mobile 187

Security Boulevard

SEPTEMBER 2, 2023

Welcome to the 7th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and [.] This post will focus on API6:2023 Unrestricted Access to Sensitive Business Flows.

62

62

Security Boulevard

MARCH 1, 2022

For a second year, Salt Security has been awarded a gold medal in the 2022 Globee® Cyber Security Global Excellence Awards , this time in the Application Programming Interface (API) Management and Security category. appeared first on Security Boulevard. The awards keep coming!

Marketing 98

Marketing Big data Technology 98

Anton on Security

MAY 19, 2022

A balance security strategy recovers attention to all 3 elements of a security triad prevention / detection / response. Finding and confirming malicious activities and presenting them to the security team and/or automatically responding to them constitutes detection and response. able to expand with the increasing workload.

Threat Detection 299

Threat Detection Technology Backups Data breaches 299

Security Boulevard

FEBRUARY 7, 2022

For the second year in a row, Cybersecurity Insiders™ has recognized Salt Security and our Salt Security API Protection Platform with Cybersecurity Excellence Awards. This year, we won for Best Cybersecurity Company and Best Cybersecurity Product in API Security. Standing out in a growing field.

Marketing 98

Marketing Big data Cybersecurity Technology 98

Security Boulevard

AUGUST 26, 2023

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you [.] This post will focus on API5:2023 Broken Function Level Authorization.

52

52

Security Boulevard

AUGUST 19, 2023

Welcome to the 5th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can [.] This post will focus on API4:2023 Unrestricted Resource Consumption.

52

52

Security Boulevard

AUGUST 12, 2023

Welcome to the 4th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what [.] This post will focus on API3:2023 Broken Object Property Level Authorization.

52

52

Security Boulevard

AUGUST 5, 2023

Welcome to the 3rd post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do [.] This post will focus on API2:2023 Broken Authentication.

Authentication 52

Authentication 52

Security Boulevard

APRIL 27, 2023

Interest in API security is running at an all-time high, as more organizations recognize what Salt saw years ago, that APIs entirely upend the security playing field! On Monday we picked up our trophy for winning ‘Hot Company’ in API security in the Global InfoSec Awards. But that’s not all!

Digital transformation 62

Digital transformation InfoSec Education Cybersecurity 62

Security Boulevard

APRIL 17, 2023

Imperva is a leader in every category – Market, Innovation, and Product Imperva, Inc., (@Imperva) the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, is an Overall Leader in the 2023 KuppingerCole Leadership Compass for Data Security Platforms.

Marketing 52

Marketing Cybersecurity 52

Security Affairs

JUNE 14, 2022

Organizations face the constant need to protect these APIs from attacks so they can protect organizational data. Organizations are rapidly opening their ecosystem through Application Programming Interfaces (API) by ensuring seamless access to data and interaction with external software components and services. Prioritize Security.

Authentication 90

Authentication Encryption Software Hacking 90

ForAllSecure

FEBRUARY 23, 2023

Application programming interfaces, or APIs, are everywhere. Everything from your Fitbit to your car has an API. Even your bank likely has an API that you use when you check your balance or make a payment. With the release of Apple's HomeKit, we're seeing even more devices with APIs appearing in our homes.

Authentication 52

Authentication Threat Detection Firewall Technology 52

IT Security Guru

OCTOBER 21, 2021

Many organisations are working to modernise their existing applications and integrate secure apps across their environments to keep pace with business demands. APIs are business critical – the most popular web applications and innovative services run on APIs. APIs are Used for Communication and Data Transfer.

Data breaches 98

Data breaches Authentication Risk eCommerce 98

Veracode Security

DECEMBER 17, 2021

Why is OWASP a Good Framework The Open Web Application Security Project (OWASP) is a nonprofit organization with the purpose to help secure software. They provide data that can give engineering and security teams a better idea of where the most common risks may lie. The API Security Top 10 consists of: 1.

Engineering 70

Engineering Authentication Risk Software 70

Security Boulevard

JANUARY 24, 2023

Last week, T-Mobile disclosed that the personally identifiable information (PII) of 37 million of its past and present customers had been breached in an API attack. They also shared that the attack had been going on since November but was only caught January 5 by T-Mobile’s security team. Was the API known to T-Mobile?

Mobile 57

Mobile Social Engineering Engineering Government 57

Security Boulevard

DECEMBER 15, 2021

Today, we’re excited to announce that Cequence Security has raised $60 million in series C funding, beginning our next phase of significant growth as a leader and innovator in the API Security category. The post Series C Funding: Bigger, Better, Faster appeared first on Security Boulevard.

52

52

Cisco Security

JULY 26, 2021

As organizations accelerate their transition to hybrid cloud, multicloud, and other dynamic environments, static security controls are no longer adequate. The shift of applications and the associated security controls within dynamic cloud environments create challenges for firewall teams to keep up with security requirements.

Firewall 115

Firewall Architecture Network Security 115

Security Affairs

MAY 28, 2022

The experts first detected the intrusion on April 12 when the company’s security team identified unauthorized access to their npm production infrastructure using a compromised AWS API key. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. Pierluigi Paganini.

Backups 145

Backups Passwords Hacking Cybersecurity 145

Security Boulevard

APRIL 25, 2022

The Salt Security team is celebrating again! Salt Security has been named to both the 2022 YC Top Companies list , as well as the newly launched YC Breakthrough Companies list ! As explained by Ali Rowghani, managing director, YC Continuity, “YC Continuity invests only in the very best, category-defining YC companies.

eCommerce 57

eCommerce Big data Financial Services Retail 57

SC Magazine

MARCH 29, 2021

Products and services recognized in this category – each of which hit the market in the last six to 12 months – look to shape the future of cybersecurity, by addressing fast-evolving threats in new and innovative ways. FINALIST | BEST EMERGING TECHNOLOGY. FINALIST | BEST EMERGING TECHNOLOGY. FINALIST | BEST EMERGING TECHNOLOGY.

Technology 65

Technology Artificial Intelligence Big data IoT 65

Security Affairs

JUNE 18, 2022

Like other banking Trojan, Malibot abuses the Accessibility Service to implements a VNC-like functionality using the Accessibility API, grabs information from screen, and populate bus object which saves device’s states. Malibot abuses the access to the Accessibility API to bypass Google 2FA methods. ” continues the report.

Banking 129

Banking Cryptocurrency Malware Mobile 129

ForAllSecure

NOVEMBER 30, 2022

Over the last several weeks, we’ve made a number of updates to both our flagship Mayhem for Code product and Mayhem for API. Recent improvements to Mayhem for API (version 2.15.7) This opens Mayhem to new categories of software defects to be reported, such as algorithmic attacks. Default Branch (Mayhem for API).

Software 52

Software Authentication 52

Security Affairs

NOVEMBER 15, 2022

Cyber espionage group Worok abuses Dropbox API to exfiltrate data via using a backdoor hidden in apparently innocuous image files. Researchers from cybersecurity firm Avast observed the recently discovered espionage group Worok abusing Dropbox API to exfiltrate data via using a backdoor hidden in apparently innocuous image files.

Data collection 97

Data collection Malware Accountability Hacking 97

The Last Watchdog

OCTOBER 30, 2023

A new tier of overlapping, interoperable, highly automated security platforms must, over the next decade, replace the legacy, on-premise systems that enterprises spent multiple kings’ fortunes building up over the past 25 years. LW: From a macro level, do security teams truly understand their EDRs?

Engineering 276

Engineering Mobile Internet Internet 276

eSecurity Planet

DECEMBER 7, 2022

Despite all this, there is one tech category that has held up fairly well: Cybersecurity. Just today, security and compliance automation firm Drata announced a $200 million Series C funding round that brings the company’s valuation to $2 billion, doubling its $1 billion valuation from its Series B round last year.

Cybersecurity 123

Cybersecurity Risk Technology Ransomware 123