Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

salt security

Building a Secure Foundation: Compliance-Driven API Posture Governance

May 30, 2025 By Eric Schwake In Salt Security
APIs are the vital connectors of modern digital business, powering everything from e-commerce and financial transactions to healthcare data exchange and government services. While indispensable for innovation, this widespread API adoption introduces significant security risks.
Read Post
appsentinels

Network Solutions API

May 30, 2025 By AppSentinels In AppSentinels
Network APIs have quietly evolved from backend enablers to frontline security and business risk vectors. While traditionally viewed as infrastructure tools, they significantly influence enterprise agility, availability, and threat surface. For CISOs and CFOs navigating the complexities of digital transformation and cyber risk governance, the security of these APIs is no longer optional—it is foundational.
Read Post
appsentinels

What is an API Specification?

May 30, 2025 By AppSentinels In AppSentinels
API specifications are no longer just tools for developers; they are also essential for businesses. In today’s hyperconnected enterprise, they serve as strategic assets that define how digital ecosystems interact, share data, and enforce security protocols. Yet, most C-suite leaders underestimate their influence on risk posture, regulatory compliance, and operational resilience. That needs to change.
Read Post

API Compliance

May 30, 2025 By A10 Networks In A10 Networks
Most organizations have no idea how many APIs are running in their environment – and that's a significant security problem. In this essential discussion, A10's security experts Akhilesh Dhawan and Jamison Utter tackle one of cybersecurity's biggest blind spots: API compliance and protection. Unlike traditional applications, APIs operate without standardized functionality requirements, creating a regulatory nightmare. This lack of standards renders APIs nearly impossible to govern effectively, making API discovery a mission-critical security function. If you can't see it, you can't protect it.
View Video
squarex

Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari

May 29, 2025 By SquareX
Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim's browser.
Read Post
salt security

Is Your API Security Just "Good Enough"? Why That's Not Enough Anymore

May 28, 2025 By Eric Schwake In Salt Security
APIs serve as the foundation for modern digital innovation, supporting everything from mobile applications to intricate business integrations. However, as their numbers soar, with many companies experiencing annual growth rates of 50-100%, they have also become a significant target for cyber attackers. Relying on "good enough" API security could leave your most vital assets perilously unprotected.
Read Post
appsentinels

Web API Authentication and Authorization Step By Step

May 28, 2025 By AppSentinels In AppSentinels
In an era where APIs are the connective tissue of enterprise ecosystems, authentication and authorization can no longer be treated as mere checklist items. They must become strategic disciplines—crafted thoughtfully to align security with business velocity, regulatory expectations, and evolving threat landscapes.
Read Post
wallarm

CISO Spotlight: Mike Wilkes on Building Resilience in an Evolving Threat Landscape

May 28, 2025 By Wallarm In Wallarm
Mike Wilkes has had a career many cybersecurity professionals could only dream of. An adjunct professor, former CISO of Marvel and MLS, member of the World Economic Forum, drummer, and board member at the National Jazz Museum in Harlem, his interests and achievements are as eclectic as they are impressive.
Read Post
appsentinels

CRUD API vs REST API - Beyond the Basics to Strategic Security Implications

May 27, 2025 By AppSentinels In AppSentinels
The conversation around API design often defaults to technical preferences—developers choosing CRUD APIs for simplicity or REST APIs for structure. However, for enterprise leaders responsible for risk, compliance, and digital resilience, the implications of this choice are far more profound. The CRUD vs. REST debate is not merely architectural; it’s strategic.
Read Post
appsentinels

Open Banking API Aggregator - The Hidden Risk and Strategic Opportunity

May 23, 2025 By AppSentinels In AppSentinels
Open banking has evolved from a regulatory obligation into a competitive imperative. What began as a movement to give consumers control over their financial data has become the engine powering innovation in fintech. At the heart of this transformation sits an often-underestimated player: the API aggregator.
Read Post
appsentinels

Open Banking API Management

May 23, 2025 By AppSentinels In AppSentinels
Open banking is often mischaracterized as a purely technical transformation—an initiative to expose financial services through APIs to third parties. But framing it this way overlooks the more profound shift underway. At its core, open banking is a re-architecture of digital trust, where customer data, once locked behind proprietary systems, becomes mobile, programmable, and subject to constant third-party interaction.
Read Post
appsentinels

What is API Latency?

May 22, 2025 By AppSentinels In AppSentinels
API latency is often an unnoticed threat in the vast digital landscape, quietly wreaking havoc on system performance, user experience, and—perhaps most critically—security. For security leaders, understanding and mitigating API latency should be more than a performance enhancement goal; it’s a foundational part of any robust cybersecurity strategy.
Read Post
appsentinels

What is an External API?

May 22, 2025 By AppSentinels In AppSentinels
In today’s highly interconnected digital ecosystem, external APIs have become indispensable for organizations looking to enhance their capabilities and remain competitive. These interfaces allow businesses to seamlessly integrate third-party services, data, and functionalities into their applications, unlocking many possibilities. However, while external APIs offer immense opportunities, they also come with significant challenges, especially regarding security, governance, and risk management.
Read Post
wallarm

Attackers Abuse TikTok and Instagram APIs

May 22, 2025 By Wallarm In Wallarm
It must be the season for API security incidents. Hot on the heels of a developer leaking an API key for private Tesla and SpaceX LLMs, researchers have now discovered a set of tools for validating account information via API abuse, leveraging undocumented TikTok and Instagram APIs. The tools, and assumed exploitation, involve malicious Python packages - checker-SaGaF, stein lurks, and inner core - uploaded to PyPI.
Read Post
wallarm

Mapping the Future of AI Security

May 21, 2025 By Wallarm In Wallarm
AI security is one of the most pressing challenges facing the world today. Artificial intelligence is extraordinarily powerful, and, especially considering the advent of Agentic AI, growing more so by the day. But it is for this reason that securing it is so important. AI handles massive amounts of data and plays an increasingly important role in operations; should cybercriminals abuse it, the consequences can be dire.
Read Post
salt security

Strengthening Cloud Security: API Posture Governance, Threat Detection, and Attack Chain Visibility with Salt Security and Wiz

May 15, 2025 By Eric Schwake In Salt Security
In the current cloud-centric environment, strong API security is essential. Google's acquisition of Wiz underscores the urgent necessity for all-encompassing cloud security solutions. Organizations should focus on both governing API posture — ensuring secure configuration and deployment to reduce vulnerabilities and assure compliance — and on effective threat detection and response.
Read Post
wallarm

Developer Leaks API Key for Private Tesla, SpaceX LLMs

May 14, 2025 By Wallarm In Wallarm
In AI, as with so many advancing technologies, security often lags innovation. The xAI incident, during which a sensitive API key remained exposed for nearly two months, is a stark reminder of this disconnect. Such oversights not only jeopardize proprietary technologies but also highlight systemic vulnerabilities in API management. As more organizations integrate AI into their operations, ensuring robust API security has never been more critical.
Read Post
wallarm

The Ongoing Risks of Hardcoded JWT Keys

May 12, 2025 By Wallarm In Wallarm
In early May 2025, Cisco released software fixes to address a flaw in its IOS XE Software for Wireless LAN Controllers (WLCs). The vulnerability, tracked as CVE-2025-20188, has a CVSS score of 10.0 and could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system – but the real story is that this vulnerability drives home the persistent risks associated with hardcoded credentials, particularly JSON Web Tokens (JWTs), in network infrastructure components.
Read Post

APIs: The Invisible Backbone of Digital Transformation

May 8, 2025 By A10 Networks In A10 Networks
APIs: The Invisible Backbone of Digital Transformation In today's app-driven economy, APIs (Application Programming Interfaces) have become the foundation for innovation and connectivity. A10's security experts Carlo Alpuerto and Jamison Utter explore the explosive growth in API development and adoption across industries. These powerful interfaces now power everything from financial services and retail experiences to transportation systems, IoT devices, autonomous vehicles, and smart city infrastructure.
View Video

Addressing API Security with NIST SP 800-228

May 8, 2025 By Wallarm In Wallarm
APIs are quickly becoming the primary attack surface targeted by cyber criminals. The rise of generative AI systems, which run on APIs, has driven a dramatic increase in the number of APIs in use. How can you ensure your existing APIs and growing AI deployments remain secure, compliant, and resilient? NIST has now released an initial public draft of SP 800-228: Guidelines for API Protection for Cloud-Native Systems.
View Video
salt security

Beyond the Perimeter: How NYDFS 23 NYCRR 500 Principles Apply to the Expanding API Attack Surface

May 8, 2025 By Eric Schwake In Salt Security
For financial institutions in New York, the NYDFS Cybersecurity Regulation (23 NYCRR 500) is a vital mandate that requires a strong and comprehensive cybersecurity framework. This regulation outlines numerous requirements aimed at safeguarding customer data and maintaining the integrity of financial systems.
Read Post
wallarm

API Threat Trends: How Attackers Are Exploiting Business Logic

May 7, 2025 By Wallarm In Wallarm
As businesses rely more on APIs, attackers are quick to turn that trust into opportunity. Among the most dangerous and difficult-to-detect threats are business logic exploits, which let cybercriminals manipulate legitimate functionality to gain unauthorized access, exfiltrate data, or disrupt operations. These attacks often slip past traditional defenses unnoticed, making them a growing concern for security teams.
Read Post
salt security

Strengthen Your Cyber Insurance Position: Why Proactive API Security is Key

May 6, 2025 By Eric Schwake In Salt Security
Navigating the cyber insurance market in 2025 feels tougher than ever. Premiums are rising, requirements are stricter, and underwriters are scrutinizing security controls with unprecedented detail. While you're likely focused on endpoint security, MFA, and backups, are you overlooking a critical attack surface that insurers increasingly care about?
Read Post
indusface

AppTrana's Enhanced API Protection: Complete Visibility, Instant Security

May 2, 2025 By Gaurav Chauhan In Indusface
APIs are now prime targets for attackers, and as your API landscape grows, so does the challenge of securing it. AppTrana’s API protection just got more powerful—with new enhancements designed to deepen discovery, increase visibility, and strengthen security.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.