Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

salt security

Are API Security Myths Silently Costing Your Business? 5 Truths Every Leader Needs to Know

Jun 2, 2025 By Eric Schwake In Salt Security
APIs are essential for modern business operations. They drive mobile applications, facilitate partner integrations, open new revenue channels, and act as critical links for emerging AI agents. At the same time, AI tools are speeding up the development of these APIs. Undoubtedly, they are vital business resources. However, are you safeguarding these resources with the careful attention they need, especially as they grow in number and complexity?
Read Post
salt security

Building a Secure Foundation: Compliance-Driven API Posture Governance

May 30, 2025 By Eric Schwake In Salt Security
APIs are the vital connectors of modern digital business, powering everything from e-commerce and financial transactions to healthcare data exchange and government services. While indispensable for innovation, this widespread API adoption introduces significant security risks.
Read Post
appsentinels

Network Solutions API

May 30, 2025 By AppSentinels In AppSentinels
Network APIs have quietly evolved from backend enablers to frontline security and business risk vectors. While traditionally viewed as infrastructure tools, they significantly influence enterprise agility, availability, and threat surface. For CISOs and CFOs navigating the complexities of digital transformation and cyber risk governance, the security of these APIs is no longer optional—it is foundational.
Read Post
appsentinels

What is an API Specification?

May 30, 2025 By AppSentinels In AppSentinels
API specifications are no longer just tools for developers; they are also essential for businesses. In today’s hyperconnected enterprise, they serve as strategic assets that define how digital ecosystems interact, share data, and enforce security protocols. Yet, most C-suite leaders underestimate their influence on risk posture, regulatory compliance, and operational resilience. That needs to change.
Read Post

API Compliance

May 30, 2025 By A10 Networks In A10 Networks
Most organizations have no idea how many APIs are running in their environment – and that's a significant security problem. In this essential discussion, A10's security experts Akhilesh Dhawan and Jamison Utter tackle one of cybersecurity's biggest blind spots: API compliance and protection. Unlike traditional applications, APIs operate without standardized functionality requirements, creating a regulatory nightmare. This lack of standards renders APIs nearly impossible to govern effectively, making API discovery a mission-critical security function. If you can't see it, you can't protect it.
View Video
squarex

Fullscreen BitM Attack Discovered by SquareX Exploits Browser Fullscreen APIs to Steal Credentials in Safari

May 29, 2025 By SquareX
Today, SquareX released new threat research on an advanced Browser-in-the-Middle (BitM) attack targeting Safari users. As highlighted by Mandiant, adversaries have been increasingly using BitM attacks to steal credentials and gain unauthorized access to enterprise SaaS apps. BitM attacks work by using a remote browser to trick victims into interacting with an attacker-controlled browser via a pop-up window in the victim's browser.
Read Post
salt security

Is Your API Security Just "Good Enough"? Why That's Not Enough Anymore

May 28, 2025 By Eric Schwake In Salt Security
APIs serve as the foundation for modern digital innovation, supporting everything from mobile applications to intricate business integrations. However, as their numbers soar, with many companies experiencing annual growth rates of 50-100%, they have also become a significant target for cyber attackers. Relying on "good enough" API security could leave your most vital assets perilously unprotected.
Read Post
appsentinels

Web API Authentication and Authorization Step By Step

May 28, 2025 By AppSentinels In AppSentinels
In an era where APIs are the connective tissue of enterprise ecosystems, authentication and authorization can no longer be treated as mere checklist items. They must become strategic disciplines—crafted thoughtfully to align security with business velocity, regulatory expectations, and evolving threat landscapes.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.