Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Beyond the Perimeter: How NYDFS 23 NYCRR 500 Principles Apply to the Expanding API Attack Surface

For financial institutions in New York, the NYDFS Cybersecurity Regulation (23 NYCRR 500) is a vital mandate that requires a strong and comprehensive cybersecurity framework. This regulation outlines numerous requirements aimed at safeguarding customer data and maintaining the integrity of financial systems.

API Threat Trends: How Attackers Are Exploiting Business Logic

As businesses rely more on APIs, attackers are quick to turn that trust into opportunity. Among the most dangerous and difficult-to-detect threats are business logic exploits, which let cybercriminals manipulate legitimate functionality to gain unauthorized access, exfiltrate data, or disrupt operations. These attacks often slip past traditional defenses unnoticed, making them a growing concern for security teams.

Strengthen Your Cyber Insurance Position: Why Proactive API Security is Key

Navigating the cyber insurance market in 2025 feels tougher than ever. Premiums are rising, requirements are stricter, and underwriters are scrutinizing security controls with unprecedented detail. While you're likely focused on endpoint security, MFA, and backups, are you overlooking a critical attack surface that insurers increasingly care about?

AppTrana's Enhanced API Protection: Complete Visibility, Instant Security

APIs are now prime targets for attackers, and as your API landscape grows, so does the challenge of securing it. AppTrana’s API protection just got more powerful—with new enhancements designed to deepen discovery, increase visibility, and strengthen security.

A New Chapter for API Security: Introducing the Salt MCP Server

There are rare moments when the technology world takes a massive leap forward. Today is one of those moments. At Salt Security, we have always believed that APIs form the connective tissue of the modern enterprise. As AI accelerates the pace of business beyond anything we’ve seen before, a simple truth has become clear: The way we discover, understand, and secure APIs must evolve, or we will be left behind.