Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

IBM 2025 Cost of a Data Breach Report: Lessons for API and AI Security

IBM’s 2025 Cost of a Data Breach Report offers one of the clearest and most comprehensive views yet of how AI adoption is shaping the security landscape. While breach numbers are relatively low – only 13% of organizations reported breaches involving AI models or applications – the report reveals a troubling pattern: APIs and integrations are often the real entry point, and they’re frequently under-secured. At Wallarm, we’ve been banging this drum for a while.

Why Authorization Is Still the Weakest Link in API Security? #apisecurity #authorization #zerotrust

Even as authentication improves, broken authorization remains one of the most exploited vulnerabilities in APIs. In this clip, Wallarm and Oracle experts discuss real-world authorization flaws—including how missing or weak access checks can let attackers access sensitive data and functions. Learn why robust, field-level authorization is essential to protecting your APIs.

Modern APIs, Modern Threats: Why WAFs and API Gateways Aren't Enough

APIs are the connective tissue of today’s digital ecosystems, driving innovation, automation, and business growth. But as APIs grow in complexity and volume, they’ve become prime targets for sophisticated and targeted attacks. Attackers are using threat vectors like business logic which bypass traditional tools like WAFs and API Gateways. In this webinar, we’ll explore why modern API security demands more than legacy defenses and how a dedicated API security solution is essential for protecting against today’s most advanced threats.

How Effective Is 'Shift-Left Security' for Protecting APIs?

Your API rollout is on track. Code’s tested, endpoints documented. John from security asks for the third revision of your vulnerability assessment, and your release date slips another two weeks. Sounds familiar? You are not alone. According to a recent report by Salt Security, 99% companies reported at least one API security incident in 2024-25. And here’s the kicker: 95% API attacks come from authenticated sessions, proving that tokens alone don’t cut it anymore.

How a Real Crypto API Exploit Let Users Change Asset Types #CryptoSecurity #CryptoExchange #crypto

A real-world API vulnerability let a user change the asset type in a major crypto exchange—bypassing expected controls. Watch how a simple tweak to API parameters enabled unauthorized trades and exposed critical flaws. Learn why detailed schema validation and input checks are essential for protecting sensitive financial APIs.

Get started with Astra API Security platform with Observability

In this video, we’ll walk you through how to get started with the Astra API Security Platform, now enhanced with Observability features. You’ll learn how to: Whether you’re a developer, security engineer, or product leader, this guide will help you quickly set up Astra and gain complete visibility into your API security.

The 15 Best API Security Tools in 2026 - Ranked by What They Do

In 2022, Optus – a major Australian telecom – suffered a breach that exposed the data of over 11 million customers. The root cause? A single, unauthenticated API endpoint. What looked like a simple oversight turned into a nationwide scandal, regulatory fallout, and shattered consumer trust. Fast forward to 2025, and APIs have only grown more powerful – and more dangerous.

Fast, Code-Free SIEM Integrations with OpenAPI | Exabeam Automation Management

Sick of slow, expensive integrations? Exabeam is the first SIEM to support the OpenAPI standard—making it easy to connect to Jira, ServiceNow, CrowdStrike, and thousands of other tools with no custom code. Fast, flexible integrations Build and test automations in one place Subscribe for more product demos and cybersecurity insights!

NPCI's UPI API Security Guidelines: What You Must Know and How to Comply Faster with AppTrana

In a landmark move to safeguard the integrity and scalability of India’s real-time payment infrastructure, the National Payments Corporation of India (NPCI) released the UPI API Security Guidelines (OC-215/2025-26). It is a transformative mandate that goes beyond regulatory compliance. These guidelines redefine how Payment Service Providers (PSPs), acquiring banks, and UPI app providers design, deploy, monitor, and govern their API interactions.