Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

API (In)security: The Hidden Risk of Black Friday

Black Friday may be the pinnacle of the holiday shopping season, a day when online retailers experience unprecedented traffic and revenue opportunities as consumers kick off the Christmas season. For many retailers, it’s a make-or-break event. Yet, with increased traffic comes increased risk, particularly as it relates to cybersecurity and keeping shoppers safe from fraud stemming from a cyberattack on their favorite digital store.

The Ultimate API Threat Report: How Wallarm Analyzes Attacks #Wallarm #dataanalysis

Discover how Wallarm gathers and analyzes real data on API attacks to create comprehensive security reports. By collecting data from Wallarm’s platform, public repositories, private sources, and security bulletins, Wallarm produces fact-based API threat stats without relying on opinions. This report provides deep insights into API vulnerabilities and attack trends, enhancing Wallarm’s API risk models and improving their security solutions. Download the full report now to stay informed on the latest API threats and protect your APIs effectively.

Taming API Sprawl: Best Practices for API Discovery and Management

APIs are the backbone of interconnected applications, enabling organizations to innovate, integrate, and scale rapidly. However, as enterprises continue to expand their digital ecosystems, they often encounter a common and complex challenge: API sprawl. Unchecked, API sprawl can lead to increased security risks, inefficient resource utilization, and the frustrating experience of redundant or hard-to-locate services across teams. Postman details the explosive growth in APIs in their State of API report.

Why Regular APIs Aren't Safe for AI Agents: A Case for Enhanced Privacy and Controls

APIs are the backbone of modern applications, enabling seamless data exchange between systems. However, the rise of AI agents fundamentally shifts how APIs are utilized. Regular APIs, originally built for deterministic, non-AI use cases, are not inherently designed to handle the complexities and unpredictability of AI-driven applications. Using your regular APIs directly for AI agents or allowing AI agents to integrate without safeguards exposes your systems and data to significant risks.

API, Identities and solving for the biggest challenges

API calls are the backbone of modern software, enabling applications to communicate and share data seamlessly. However, with this integration comes the challenge of understanding and managing the identities used in API calls. These identities, often tied to authentication and authorization mechanisms, are crucial for determining what data is accessed and exchanged.

Dell's API Security Failure: How 49 Million Records Were Exposed #dell #DataBreach #dataleaks

In this video, we examine two significant API security failures, each with devastating consequences. The first breach used a simple trial-and-error method, exploiting broken access control to impact 10 million users. In the Dell example, API abuse exploited a lack of validation and rate limiting, allowing an attacker, posing as a partner, to scrape 49 million records over several weeks. These cases highlight the importance of robust API security practices, especially for business processes and access control. Watch to learn key takeaways on protecting APIs from similar attacks.

Founder's Corner: Episode 3

Welcome to Episode Three of Salt Security’s Podcast Series: Founder’s Corner Salt’s CEO and Co-founder, Roey Eliyahu, talks with Salt’s CMO, Michael Callahan, about the first step of the customer journey in API Security: Discovery (also known as the crawl stage). They dive into topics around Discovery (as well as Salt’s phases of Discovery), Data Security, Shadow and Zombie APIs, GenAI, and how Salt is utilizing AI.

Your AppSec Journey Demystified: Driving Effective API Security with Wallarm and StackHawk

There is no doubt that attackers have shifted their attention to APIs. Wallarm’s API ThreatStats research identifies that 70% of attacks now target APIs instead of Web Applications. While APIs have become the backbone of innovation and connectivity for businesses, they have also introduced a vast attack surface that’s challenging to defend with traditional methods alone.