Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

appknox

API Security Testing Checklist for Developers

Jun 30, 2025 By Aadarsh Anand In Appknox
APIs are the backbone of modern applications, facilitating seamless communication and data exchange. However, this ubiquity makes them prime targets for cyberattacks. As developers, building robust and secure APIs isn't just a best practice; it's a critical responsibility. This blog post provides a comprehensive API security testing checklist to help you identify and mitigate API vulnerabilities, ensuring your APIs are fortified against evolving threats.
Read Post

API Discovery: Uncover Hidden Endpoints Before Attackers Do

Jun 30, 2025 By Indusface In Indusface
APIs are targeted 43% more often than websites and suffer 160% more DDoS attacks. Undocumented shadow APIs and zombie endpoints expose your business to breaches. In this video, learn how comprehensive API discovery reveals hidden and outdated endpoints, reduces blind spots, and helps you secure your API landscape before attackers find their way in.
View Video

Protecting Digital Transactions with API and Web Application Security

Jun 28, 2025 By A10 Networks In A10 Networks
Protecting Digital Transactions with API and Web Application Security In this video, A10 Networks' Jamison Utter and Gary Wang discuss why a different approach to security is required beyond purely transactional-based protection and detection. They delve into how entity-based tracking helps address the challenges of legitimate-looking requests that carry malicious intent, particularly in the context of Application programming interfaces (API) security and advanced threats, such as Layer 7 DDoS attacks.
View Video
aikido

Seamless API Security with Postman x Aikido

Jun 27, 2025 By Madeline Lawrence In Aikido
We’re teaming up with our friends at Postman to bring API security even closer to where developers already work. With the upcoming Aikido Security + Postman integration, you’ll be able to view recent security scans for your API collections—without ever leaving Postman. No new tabs. No switching tools. Just quick, clear security insights as you’re building. It’s never been easier to build and scale secure APIs as your organization grows.
Read Post
wallarm

Beyond Traditional Threats: The Rise of AI-Driven API Vulnerabilities

Jun 26, 2025 By Wallarm In Wallarm
AI has had dramatic impacts on almost every facet of every industry. API security is no exception. Up until recently, defending APIs meant guarding against well-understood threats. But as AI proliferates, automated adversaries, AI-crafted exploits, and business logic abuse have complicated matters. It’s no longer enough to merely patch known flaws; security teams must now contend with intelligent, adaptive attacks that evolve as fast as the technology they target.
Read Post

Smarter API Security Demo: See How Wallarm Protects Modern APIs and Agentic AI

Jun 26, 2025 By Wallarm In Wallarm
Modern APIs are under constant attack—from botnets to logic abuse to threats targeting Agentic AI. Most security tools lag behind. Wallarm doesn’t. Join us for a live walkthrough of Wallarm’s advanced API security platform. In this session you will see how to instantly discover vulnerable endpoints, protect business-critical flows, and stop API abuse—without slowing down your teams. What you'll learn.
View Video

API Security Is a Business Problem-Not Just an IT One

Jun 26, 2025 By Wallarm In Wallarm
APIs are more than technical components—they're business-critical assets. In this powerful moment, Jeremy Dodson lays out why frameworks aren't enough and why companies must treat API security as a core business priority. Security leaders: it’s time to shift your mindset and protect real data flows, not just check boxes.
View Video

NGINX Integration: How to install nginx and instrument it to observe API traffic

Jun 25, 2025 By Astra Security In Astra
In this step-by-step tutorial, we walk you through the complete process of installing NGINX and instrumenting it to monitor and observe API traffic. Whether you're just getting started or looking to improve your observability stack, this guide will help you set up NGINX for effective traffic monitoring. In this video you'll learn: Why is this important? Observing API traffic helps you detect issues early, optimize performance, and ensure your services are running smoothly.
View Video

CDNs Won't Save Your APIs: Here's Why You Need to Rethink Security

Jun 24, 2025 By Wallarm In Wallarm
Content delivery networks (CDNs) are great for performance—but terrible for protecting APIs. Attackers can poison the cache or route around security altogether when APIs are misconfigured. In this clip, Jeremy Dodson explains why relying on CDNs can expose critical business data.
View Video
securitysenses

How Businesses Use Satellite Imagery APIs To Work Smarter

Jun 23, 2025 By SecuritySenses In SecuritySenses
Satellite images used to be hard to get and even harder to use. Now, that's changed. APIs have made satellite data more accessible than ever, and businesses are taking notice. With just a few lines of code, you can monitor land, track patterns, and uncover trends that are invisible from the ground. By integrating a satellite imagery API in your application, you bring powerful visual data into your daily operations. Whether it's for analysis, alerts, or reporting, the right image at the right time can make a real difference in how you see the world and interact with it.
Read Post
wallarm

Five Uncomfortable Truths About LLMs in Production

Jun 19, 2025 By Wallarm In Wallarm
Many tech professionals see integrating large language models (LLMs) as a simple process -just connect an API and let it run. At Wallarm, our experience has proved otherwise. Through rigorous testing and iteration, our engineering team uncovered several critical insights about deploying LLMs securely and effectively. This blog shares our journey of integrating cutting-edge AI into a security product.
Read Post
salt security

Eliminate Your AWS API Blind Spots in Minutes

Jun 18, 2025 By Eric Schwake In Salt Security
Traditionally, securing APIs in AWS has involved a frustrating trade-off. Obtaining a full view of your API Fabric requires weeks or months of deploying various agents, setting up traffic analysis, and enduring lengthy professional services engagements. The outcome? An unacceptably slow time-to-value that keeps you unaware of potential risks for too long. The main issue hasn't only been locating APIs, but also the extensive wait to identify them. But what if that trade-off is no longer necessary?
Read Post
apono

API Gateway Security: The Essential InfoSec Guide

Jun 17, 2025 By The Apono Team In Apono
As the software world shifted toward microservices and distributed architectures, the volume and complexity of API traffic have skyrocketed. Unfortunately, so has the number of API-related breaches and cyber attacks. Last year, nearly 44% of all advanced bot traffic online targeted API endpoints, while traditional web applications received just 10% of the malicious traffic. It’s no surprise that 57% of organizations admit to having suffered API-related breaches in the past two years.
Read Post
appsentinels

API Gateway Security

Jun 16, 2025 By AppSentinels In AppSentinels
In today’s threat landscape, enterprise security isn’t breached in the apparent places—it’s compromised in the seams. One of the most overlooked seams is the API gateway. While celebrated for its role in routing traffic and managing APIs, the API gateway has quietly become one of the most critical and exposed components in modern digital infrastructure.
Read Post
Snyk

Announcing a Dedicated Snyk API & Web Infrastructure Instance for Asia-Pacific

Jun 16, 2025 By Snyk Team In Snyk
Snyk is delighted to announce a significant milestone for our customers and partners in the Asia-Pacific (APAC) region: the launch of a dedicated Snyk API & Web infrastructure instance, which is now available and hosted locally within the region. This investment addresses the critical needs of our growing customer base in the region, ensuring that they can benefit from our modern, developer-first DAST capabilities while meeting local data residency and compliance requirements.
Read Post
wallarm

CISO Spotlight: Rick Bohm on Building Bridges, Taming AI, and the Future of API Security

Jun 11, 2025 By Wallarm In Wallarm
Nestled in a log cabin high in the Rocky Mountains, Rick Bohm starts his day the same way he’s approached his career: intentionally, with a quiet commitment to learning and action. Boasting more than three decades of cybersecurity experience, Rick has watched tech evolve from dial-up ISPs to advanced AI-driven security architectures – and through it all, he’s focused on one enduring mission: protecting data, organizations, and people.
Read Post
Choosing the best SMS API for scalable marketing campaigns

Choosing the best SMS API for scalable marketing campaigns

Jun 10, 2025 By SecuritySenses In SecuritySenses
Have you ever wondered why some SMS campaigns get responses within minutes, while others get lost in the noise of notifications? It all comes down to the quality and capabilities of the tool used. When marketing effectiveness is at stake, it's important to choose not just a convenient solution, but one that is truly scalable and technologically advanced. This is the role of an SMS API - an interface that turns marketing into a manageable and measurable system.
Read Post
salt security

Simplify API Security with Salt Ecosystem Integrations

Jun 6, 2025 By Eric Schwake In Salt Security
APIs are essential, but they also represent a growing and complex risk to your organization. Intricate application architectures and an ever-evolving threat landscape already make API security a constant challenge. The increasing reliance on APIs by new technologies, including AI, further amplifies this risk.
Read Post
appsentinels

API Attacks - The Hidden Threat to Your Digital Ecosystem

Jun 6, 2025 By AppSentinels In AppSentinels
APIs are the connective tissue of the digital economy, silently enabling transactions, data exchanges, and automation across industries. Yet, as businesses rush to integrate APIs into every aspect of their operations, they often overlook a significant reality: APIs are rapidly becoming the most targeted attack vector in cybersecurity.
Read Post

5 Expenses MSPs Absorb without Web App & API Security

Jun 6, 2025 By Indusface In Indusface
Uncover 5 major expenses Managed Service Providers (MSPs) often absorb when web application and API security isn't in place. From breach clean up cost to reputational damage, these hidden costs can impact your profitability and customer trust. Don’t let poor security planning hurt your bottom line. Watch now and learn how to eliminate these costs with a proactive security approach.
View Video

API Security Issues

Jun 5, 2025 By A10 Networks In A10 Networks
How to Fix the Challenges with Web App Firewalls A10 expert Jamison Utter discusses with Gary Wang why API security is a challenge to manage, as these APIs are headless and cannot be accessed through a login. There is no authentication mechanism, such as completing a CAPTCHA. APIs are also vulnerable to bots, which complicates matters. Watch the full video to learn more about multi-layered approaches, threat intelligence, behavioral analysis, and protection against modern threats like bots and APIs.
View Video
wallarm

Addressing API Security with NIST SP 800-228

Jun 4, 2025 By Wallarm In Wallarm
According to the Wallarm Q1 2025 ThreatStats report, 70% of all application attacks target APIs. The industry can no longer treat API security as a sidenote; it’s time to treat it as the main event. NIST seems to be on board with this view, releasing the initial public draft of NIST SP 800-228, a set of recommendations for securing APIs.
Read Post
salt security

Don't Be a Statistic: Proactive API Security in the Age of AI

Jun 4, 2025 By Eric Schwake In Salt Security
Your business depends on APIs, which are essential for contemporary digital experiences, encompassing everything from mobile applications and IoT devices to the rapidly evolving AI landscape. With more than 80% of internet traffic now routed through APIs—a number projected to rise significantly due to AI developments—their security is crucial. Unfortunately, this vital infrastructure faces growing attacks, with these threats being a real and current danger to many.
Read Post
trustcloud

Leveraging API-driven security platforms for hybrid enterprises

Jun 4, 2025 By Richa Tiwari In TrustCloud
Hybrid enterprises, defined by the coexistence of on-premises systems and cloud-based solutions, have become the norm in today’s digital economy. The evolution of IT infrastructure and the widespread adoption of cloud environments have dramatically broadened the attack surface. Enterprises face persistent threats including advanced persistent threats (APTs), data breaches, ransomware attacks, and insider risks.
Read Post
appsentinels

OWASP API Cheat Sheet - From Developer Guidance to Executive Strategy

Jun 3, 2025 By AppSentinels In AppSentinels
OWASP’s API Security Cheat Sheet is a familiar resource for many cybersecurity leaders—often bookmarked, rarely reimagined. But what if this seemingly developer-focused reference held the blueprint for executive-level strategy? For CISOs and CFOs operating in the era of digital ecosystems and financial APIs, this cheat sheet is not just tactical guidance—it’s strategic armor.
Read Post
salt security

Introducing Salt Illuminate: API Security That Works in Minutes, Not Months

Jun 3, 2025 By Michael Callahan In Salt Security
APIs are the backbone of modern business. They connect services, power user experiences, and enable innovation at breakneck speed. But they’ve also become one of the largest, most complex threat surfaces out there—and traditional security approaches just aren’t cutting it. At Salt Security, we’ve spent years pioneering API protection. And today, we’re thrilled to announce our biggest leap forward yet. Meet Salt Illuminate.
Read Post
appsentinels

Abnormal API Security: Elevating Your Organization's Cybersecurity Posture

Jun 3, 2025 By AppSentinels In AppSentinels
In today’s increasingly interconnected digital landscape, APIs have become the invisible backbone of organizational efficiency, enabling data sharing, automation, and business innovation with quiet efficiency. However, as APIs proliferate, so do the vulnerabilities and targeted attacks that threaten to disrupt operations, compromise sensitive information, and damage an organization’s reputation.
Read Post
appsentinels

REST API Response Best Practices: Building Trust, Security, and Efficiency Into Every Interaction

Jun 3, 2025 By AppSentinels In AppSentinels
REST APIs are the arteries of today’s digital ecosystems, silently exchanging data between countless applications, users, and devices. Yet, in the race to protect endpoints, authenticate users, and encrypt payloads, the security nuances of API responses are often overlooked. This oversight leaves a dangerous gap where attackers don’t need to break in; they simply listen, observe, and exploit what’s willingly given away.
Read Post
salt security

Are API Security Myths Silently Costing Your Business? 5 Truths Every Leader Needs to Know

Jun 2, 2025 By Eric Schwake In Salt Security
APIs are essential for modern business operations. They drive mobile applications, facilitate partner integrations, open new revenue channels, and act as critical links for emerging AI agents. At the same time, AI tools are speeding up the development of these APIs. Undoubtedly, they are vital business resources. However, are you safeguarding these resources with the careful attention they need, especially as they grow in number and complexity?
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.