Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

API

How to configure Joomla Custom REST API Plugin

Sep 23, 2024 By miniOrange In miniOrange
The Joomla Custom API plugin lets you create custom APIs to expand the capabilities of the Joomla CMS (Content Management System). By using these APIs you can expose particular features or data from your Joomla website, allowing external programs or services to communicate with your Joomla website. With the help of the custom endpoints you have developed, this plugin offers a smooth method to work with the Joomla database, enabling you to easily carry out CRUD (Create, Read, Update, and Delete) operations.
View Video
foresiet

The Rising Cost of Insecure APIs and Bot Attacks: Global Firms Face $186 Billion in Losses

Sep 20, 2024 By Foresiet In Foresiet
In the evolving landscape of digital threats, two growing concerns are proving costly for organizations worldwide: insecure APIs and bot attacks. A recent report highlights that these vulnerabilities have escalated dramatically, with global firms suffering financial losses between $94 billion to $186 billion annually. The exponential rise in API adoption, combined with AI-powered bot attacks, has created a perfect storm for cybercriminals to exploit.
Read Post
wallarm

Chicago API Security Summit 2024

Sep 20, 2024 By Wallarm In Wallarm
Earlier this week we had the pleasure of hosting a regional API Security Summit in Chicago (well, actually in Lombard). These summits bring together the local cybersecurity community for half-day of API Security-focused content, including expert speakers and panelists. While this isn’t the first time we’ve organized an event like this, it was memorable for the quality of content and participants.
Read Post
salt security

Telecom Giants Unite to Revolutionize API Innovation on a Global Scale - Are You Prepared?

Sep 19, 2024 By Eric Schwake In Salt Security
In a groundbreaking move, some of the world’s largest telecom operators—América Móvil, AT&T, Bharti Airtel, Deutsche Telekom, Orange, Reliance Jio, Singtel, Telefonica, Telstra, T-Mobile, Verizon, and Vodafone—are partnering with Ericsson to launch a new venture aimed at transforming how network Application Programming Interfaces (APIs) are accessed and used.
Read Post
panoptica

The Imperative of API Security in DevOps

Sep 19, 2024 By By: Shweta Khare In Panoptica
Consider a modern software application as a constellation of cities that dot the landscape. These cities are components such as databases, authentication services, business logic engines, and more. Requests travel between components carrying data just as citizens travel between cities carrying their belongings. The highways that connect the cities on this map are your APIs. Cities get the most attention, often receiving the security and protection they need.
Read Post
wallarm

Fundamentals of GraphQL-specific attacks

Sep 13, 2024 By Wallarm In Wallarm
Developers are constantly exploring new technologies that can improve the performance, flexibility, and usability of applications. GraphQL is one such technology that has gained significant attention for its ability to fetch data efficiently. Unlike the traditional REST API, which requires multiple round trips to the server to gather various pieces of data, GraphQL allows developers to retrieve all the needed data in a single request.
Read Post
kondukto

Protecting APIs of Modern Applications

Sep 13, 2024 By Kondukto Security Team In Kondukto
Application Programming Interfaces (APIs) have become the backbone of modern applications. They enable seamless interaction between different software systems, allowing businesses to innovate rapidly. With the proliferation of APIs comes an increased risk of security vulnerabilities. Ensuring API security is crucial to safeguarding sensitive data, maintaining user trust and protecting the integrity of applications.
Read Post
cloudflare

Protecting APIs from abuse using sequence learning and variable order Markov chains

Sep 12, 2024 By Peter Foster In Cloudflare
Consider the case of a malicious actor attempting to inject, scrape, harvest, or exfiltrate data via an API. Such malicious activities are often characterized by the particular order in which the actor initiates requests to API endpoints. Moreover, the malicious activity is often not readily detectable using volumetric techniques alone, because the actor may intentionally execute API requests slowly, in an attempt to thwart volumetric abuse protection.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.