Security Boulevard

JULY 29, 2023

Welcome to the 2nd post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you [.] This post will focus on API1:2023 Broken Object Level Authorization.

96

96

The Last Watchdog

JUNE 13, 2022

Related: Taking API proliferation seriously. The top drivers of the continued growth of cybersecurity are: the growing need to protect the API supply chain, the inadequacy of existing identity management systems, and the unfulfilled promise of data-driven AI-powered cybersecurity systems. Securing APIs.

Cybersecurity 257

Cybersecurity Artificial Intelligence Software Marketing 257

The Last Watchdog

NOVEMBER 30, 2021

APIs are the snippets of code that interconnect the underlying components of all the digital services we can’t seem to live without. Indeed, APIs have opened new horizons of cloud services, mobile computing and IoT infrastructure, with much more to come. API vulnerabilities are ubiquitous and multiplying; they’re turning up everywhere.

Big data 240

Big data Digital transformation Accountability Software 240

Security Boulevard

JUNE 7, 2023

As you know by now, the final version of the OWASP API Security Top-10 2023 has been released. At first blush, the final 2023 release seems to retain most of the changes in category naming, language and intent from the 2019 edition which we saw in the RC version. In this post, we are going [.]

Risk 67

Risk 67

Cisco Security

SEPTEMBER 16, 2021

This workflow pulls the activity report for a configurable list of categories, creates an incident in SecureX, notifies the team in Webex Teams and updates a SecureX dashboard tile. Categories to Alert On” is a comma separated list of categories we want to be notified about, which makes it very easy to add or remove categories on the fly.

DNS 105

DNS Authentication Technology Malware 105

Security Boulevard

OCTOBER 7, 2023

Welcome to the 12th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do about it. To see previous posts you might [.]

62

62

Security Boulevard

SEPTEMBER 9, 2023

Welcome to the 8th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what [.] This post will focus on API7:2023 Server Side Request Forgery (SSRF).

67

67

Security Boulevard

SEPTEMBER 23, 2023

Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can [.] This post will focus on API9:2023 Improper Inventory Management.

62

62

IT Security Guru

AUGUST 10, 2023

The Open Web Application Security Project (OWASP), a non-profit foundation devoted to web application security, recently released the 2023 OWASP API Security Top 10 list. The list aims to raise awareness about the most common API security risks plaguing organisations and how to defend against them.

Authentication 98

Authentication Risk 98

Security Boulevard

SEPTEMBER 16, 2023

Welcome to the 9th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do [.] This post will focus on API8:2023 Security Misconfiguration.

62

62

Security Boulevard

APRIL 24, 2023

We’ll get the chance to talk with security leaders about why API security has become a priority project, and we’ll get time to catch up with customers and each other. Today we announced that Salt has won “Hot Company” in the API security category in the Cyber Defense Magazine (CDM) 2023 Global InfoSec Awards.

InfoSec 52

InfoSec Threat Detection Architecture Engineering 52

Security Boulevard

SEPTEMBER 2, 2023

Welcome to the 7th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and [.] This post will focus on API6:2023 Unrestricted Access to Sensitive Business Flows.

62

62

Adam Levin

APRIL 10, 2019

The analysis was conducted by the Aite Group, which looked at mobile apps in eight categories: retail banking, credit cards, mobile payment, healthcare savings, retail finance, health insurance, auto insurance and cryptocurrency.

Banking 187

Banking Retail Insurance Mobile 187

Security Boulevard

MARCH 1, 2022

For a second year, Salt Security has been awarded a gold medal in the 2022 Globee® Cyber Security Global Excellence Awards , this time in the Application Programming Interface (API) Management and Security category. Experience for yourself how Salt can help make your APIs attack-proof and protect your organization’s critical data!

Marketing 98

Marketing Big data Technology 98

Security Boulevard

FEBRUARY 7, 2022

For the second year in a row, Cybersecurity Insiders™ has recognized Salt Security and our Salt Security API Protection Platform with Cybersecurity Excellence Awards. This year, we won for Best Cybersecurity Company and Best Cybersecurity Product in API Security. Request a personalized demo.

Marketing 98

Marketing Big data Cybersecurity Technology 98

Security Boulevard

AUGUST 26, 2023

Welcome to the 6th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you [.] This post will focus on API5:2023 Broken Function Level Authorization.

52

52

Anton on Security

MAY 19, 2022

utilizes systems that are replaced, rather than updated Ephemeral uses workloads often created for the task and then removed API driven?—?enabled enabled by pervasive APIs Centered on identity layer?—?mostly Pervasive encryption hampers layer 7 traffic analysis, while public APIs rewrite the rules on what a perimeter is.

Threat Detection 299

Threat Detection Technology Backups Data breaches 299

Security Boulevard

AUGUST 19, 2023

Welcome to the 5th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can [.] This post will focus on API4:2023 Unrestricted Resource Consumption.

52

52

Security Boulevard

AUGUST 12, 2023

Welcome to the 4th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what [.] This post will focus on API3:2023 Broken Object Property Level Authorization.

52

52

Security Boulevard

AUGUST 5, 2023

Welcome to the 3rd post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a particular focus on security practitioners. In this series we are taking an in-depth look at each category – the details, the impact and what you can do [.] This post will focus on API2:2023 Broken Authentication.

Authentication 52

Authentication 52

Security Boulevard

APRIL 27, 2023

Interest in API security is running at an all-time high, as more organizations recognize what Salt saw years ago, that APIs entirely upend the security playing field! On Monday we picked up our trophy for winning ‘Hot Company’ in API security in the Global InfoSec Awards. But that’s not all!

Digital transformation 62

Digital transformation InfoSec Education Cybersecurity 62

Security Boulevard

APRIL 17, 2023

Imperva is a leader in every category – Market, Innovation, and Product Imperva, Inc., (@Imperva) the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, is an Overall Leader in the 2023 KuppingerCole Leadership Compass for Data Security Platforms.

Marketing 52

Marketing Cybersecurity 52

ForAllSecure

FEBRUARY 23, 2023

Application programming interfaces, or APIs, are everywhere. Everything from your Fitbit to your car has an API. Even your bank likely has an API that you use when you check your balance or make a payment. With the release of Apple's HomeKit, we're seeing even more devices with APIs appearing in our homes.

Authentication 52

Authentication Threat Detection Firewall Technology 52

IT Security Guru

OCTOBER 21, 2021

Modern application development relies on Application Programming Interfaces (APIs), which enable services and products to communicate with each other and leverage each other’s data and functionality to support business operations. APIs are business critical – the most popular web applications and innovative services run on APIs.

Data breaches 99

Data breaches Authentication Risk eCommerce 99

Veracode Security

DECEMBER 17, 2021

But OWASP also maintains the API Security Top 10 project which was last updated in 2019. Each category is ranked based on the frequency and severity of the defect. The API Security Top 10 consists of: 1. The 2021 OWASP Top 10, released in November 2021, lists the most critical web application security risks.

Engineering 70

Engineering Authentication Risk Software 70

Security Affairs

JUNE 14, 2022

Organizations face the constant need to protect these APIs from attacks so they can protect organizational data. Organizations are rapidly opening their ecosystem through Application Programming Interfaces (API) by ensuring seamless access to data and interaction with external software components and services. Prioritize Security.

Authentication 74

Authentication Encryption Software Hacking 74

Schneier on Security

SEPTEMBER 8, 2023

Last March, just two weeks after GPT-4 was released , researchers at Microsoft quietly announced a plan to compile millions of APIs—tools that can do everything from ordering a pizza to solving physics equations to controlling the TV in your living room—into a compendium that would be made accessible to large language models (LLMs).

Banking 244

Banking Risk Accountability Government 244

Security Boulevard

JANUARY 24, 2023

Last week, T-Mobile disclosed that the personally identifiable information (PII) of 37 million of its past and present customers had been breached in an API attack. In its SEC filing, T-Mobile called the attack "malicious" and stated that data attained through its API was done "without authorization.” Was the API known to T-Mobile?

Mobile 57

Mobile Social Engineering Engineering Government 57

Security Boulevard

DECEMBER 15, 2021

Today, we’re excited to announce that Cequence Security has raised $60 million in series C funding, beginning our next phase of significant growth as a leader and innovator in the API Security category. Menlo Ventures led this most recent funding round, with partner Venky Ganesan joining our board of directors.

52

52

Cisco Security

JULY 26, 2021

The new Cisco Secure Dynamic Attributes Connector utility addresses the complexity by making API calls to popular environments such as AWS, Azure, VMware NSX-T, and Office 365. Let’s take a simple example of limiting your development team’s AWS instances access. Don’t see a dynamic attribute you need today? If so, you are in luck!

Firewall 114

Firewall Architecture Network Security 114

ForAllSecure

NOVEMBER 30, 2022

Over the last several weeks, we’ve made a number of updates to both our flagship Mayhem for Code product and Mayhem for API. Recent improvements to Mayhem for API (version 2.15.7) This opens Mayhem to new categories of software defects to be reported, such as algorithmic attacks. Default Branch (Mayhem for API).

Software 52

Software Authentication 52

Security Boulevard

APRIL 25, 2022

As explained by Ali Rowghani, managing director, YC Continuity, “YC Continuity invests only in the very best, category-defining YC companies. APIs represent the foundation of today’s modern and digitally driven applications. Along with increased volume, APIs represent a significant risk factor in two other ways.

eCommerce 57

eCommerce Big data Financial Services Retail 57

SC Magazine

MARCH 29, 2021

Products and services recognized in this category – each of which hit the market in the last six to 12 months – look to shape the future of cybersecurity, by addressing fast-evolving threats in new and innovative ways. FINALIST | BEST EMERGING TECHNOLOGY. FINALIST | BEST EMERGING TECHNOLOGY. FINALIST | BEST EMERGING TECHNOLOGY.

Technology 65

Technology Artificial Intelligence Big data IoT 65

Security Affairs

MAY 28, 2022

The experts first detected the intrusion on April 12 when the company’s security team identified unauthorized access to their npm production infrastructure using a compromised AWS API key. Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Backups 138

Backups Passwords Hacking Cybersecurity 138

Security Affairs

NOVEMBER 15, 2022

Cyber espionage group Worok abuses Dropbox API to exfiltrate data via using a backdoor hidden in apparently innocuous image files. Researchers from cybersecurity firm Avast observed the recently discovered espionage group Worok abusing Dropbox API to exfiltrate data via using a backdoor hidden in apparently innocuous image files.

Data collection 85

Data collection Malware Accountability Hacking 85

Schneier on Security

MARCH 27, 2023

The first to fall was Adobe Reader in the enterprise applications category after Haboob SA’s Abdul Aziz Hariri ( @abdhariri ) used an exploit chain targeting a 6-bug logic chain abusing multiple failed patches which escaped the sandbox and bypassed a banned API list on macOS to earn $50,000.

Hacking 44

Hacking 44

Security Affairs

JUNE 18, 2022

Like other banking Trojan, Malibot abuses the Accessibility Service to implements a VNC-like functionality using the Accessibility API, grabs information from screen, and populate bus object which saves device’s states. Malibot abuses the access to the Accessibility API to bypass Google 2FA methods. ” continues the report.

Banking 113

Banking Cryptocurrency Malware Mobile 113