Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

API Security Trends 2026: Strategies, Risks & Solutions

In 2026, API security trends reveal a humbling reality. 99% of organizations have experienced at least one API security incident in the past year, with API-related breaches accounting for over 90% of all web-based attacks. Unlike yesterday’s perimeter-based threats, today’s API security challenges are fundamentally different. For every human identity, there exists ~ 82 machine identities, with >40% of those holding privilege/sensitive access within organisations.

Critical React2Shell RCE Hits React and Next.js (CVE-2025-55182 / CVE-2025-66478)

React2Shell is a severe remote, unauthenticated RCE vulnerability recently uncovered in React Server Components (RSC) and the Next.js App Router — tracked as CVE-2025-55182, with CVE-2025-66478 later merged as a duplicate — that allows attackers to execute arbitrary code on servers by exploiting insecure Flight protocol deserialization (CWE-502), earning the flaw a maximum CVSS score of 10.0.

The State of Cloud Security in 2026, with Shira Rubinoff

What really happened in cloud security in 2025 and what should security leaders prepare for in 2026? In this session, cybersecurity leader, Shira Rubinoff breaks down the biggest cloud security challenges organizations faced in 2025, why cloud misconfigurations and IAM complexity are still major risks, and how CISOs should rethink cloud security strategy and budgeting for 2026.