Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Videos

Dell's API Security Failure: How 49 Million Records Were Exposed #dell #DataBreach #dataleaks

In this video, we examine two significant API security failures, each with devastating consequences. The first breach used a simple trial-and-error method, exploiting broken access control to impact 10 million users. In the Dell example, API abuse exploited a lack of validation and rate limiting, allowing an attacker, posing as a partner, to scrape 49 million records over several weeks. These cases highlight the importance of robust API security practices, especially for business processes and access control. Watch to learn key takeaways on protecting APIs from similar attacks.

How Weak Access Controls Led to the Optus API Breach #accesscontrol #databreach #dataleaks

Broken access controls are one of the leading causes of API breaches. Learn how weak access control can leave your data exposed, as we explore real-world examples and share insights on protecting sensitive information. Strengthen your API access controls to safeguard against unauthorized access and potential breaches!

Key Indicators of a Strong API Security Program - Do You Have Them? #securitymeasures #securitykey

What does a successful API security program look like? Discover the essential indicators that every organization should monitor, from inventory control to continuous monitoring and anomaly detection. Learn how these key metrics can safeguard your APIs and ensure your defenses are ready for emerging threats!

Gaining Security Context with API Session Data

API attacks don't always occur in a single request, and more sophisticated attacks require additional context. Whether it's account takeover or scraping, understanding the behavior of an attacker across a session is key to accurate detection and effective investigation. Today, organizations often lack the ability to delve into the details of specific API sessions. Data is spread across multiple tools, or simply unavailable. The Wallarm platform allows users to seamlessly navigate between attack detections and the surrounding session data to fully understand the behavior and interactions involved.

Successful Strategies for API Security Deployments (Wallarm October 2nd Webinar)

With the dramatic rise in API threats, API Security is a must-have security control for large and small organizations. Securing your APIs requires a clear understanding of your infrastructure and technology stack. In this webinar, we'll explore the requirements, best practices, and pitfalls of deploying an API Security platform, including: Join Wallarm experts with vast experience deploying API security across different types of infrastructure for the informative presentation.

CISO Briefing: API Security is AI Security (API ThreatStats Q3 2024 Spotlight)

API threats against AI are on the rise. The Wallarm Research team has researched and dissected the top API threats from the 3rd quarter of 2024. This report explores the top significant threats, notable API breaches, identifies key trends, and provides actionable insights that can help you strengthen your API Security program.

GraphQL Security Breach: How 30 Million Accounts Were Hacked #hacked #databreach #graphql #api

In this video, we explore a real-world example of a GraphQL exploit that exposed 30 million user accounts to attackers. Learn how vulnerabilities in GraphQL led to access token generation and account takeovers, and what this means for API security.

API Security Essentials: What You Must Know About Positive and Negative Models #apisecurity #api

In this video, we dive into the fundamentals of API security by comparing two key security models: Positive and Negative. Learn how each model works, their pros and cons, and how to choose the right one to protect your APIs effectively.