Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

wallarm

CISO Spotlight: AJ Debole on the Business-Tech Divide, Breach Readiness, and AI Risks

Sep 23, 2025 By Wallarm In Wallarm
AJ Debole is Field CISO at Oracle, but her journey began far from the corporate boardroom. After starting out in law and government, she moved into healthcare and cyber defense, where she led teams through ransomware crises. In this spotlight, she explores the next wave of challenges – aligning security with business incentives, taming AI sprawl, and securing the APIs that connect it all.
Read Post
detectify

Infinite payloads? The future of API Testing with dynamic fuzzing

Sep 18, 2025 By Detectify In Detectify
What if we told you that our newly released API Scanner has 922 quintillion payloads for a single type of vulnerability test? A quintillion is a billion billion – an immense number that highlights the limitations of traditional API security testing. Old methods like relying on signatures, vulnerability-specific payloads, or a fixed set of fuzzing inputs just aren’t enough anymore, especially when dealing with custom-built software and unique API endpoints.
Read Post

Telemetry Alone Won't Save You: Why Action Matters in API Security #telemetry #appsec #infosec

Sep 18, 2025 By Wallarm In Wallarm
Collecting logs and metrics isn’t enough real API security requires actionable insights and the ability to respond fast. In this clip, Wallarm and Oracle experts explain why telemetry without a clear response plan is useless, and how building detection into your incident response process makes the difference between stopping threats and just observing them.
View Video
apono

The Required API Security Checklist [XLS download]

Sep 17, 2025 By The Apono Team In Apono
APIs are the foundation of modern applications, and attackers know it well. A single misconfigured endpoint or exposed token can give adversaries a direct path into sensitive systems and data across your environment. Your already overburdened security teams can’t afford to miss what may be their fastest-growing attack surface. How fast-growing is the threat?
Read Post
Forward Networks

Automate Network Intelligence with the Forward Networks API

Sep 16, 2025 By Forward Networks In Forward Networks
The Forward Networks platform creates a complete digital twin of your network—but the power of that data multiplies when it’s accessible via API. Whether you’re pushing insights into dashboards, validating changes before rollout, or automating ticket generation, the API puts your network state into your workflows.
Read Post
astra

API Security Testing with DAST vs. SAST Approaches

Sep 16, 2025 By Keshav Malik In Astra
API security breaches have reached a crisis point, with 57% of organizations experiencing API-related breaches in the past two years. Only 13% of organizations can prevent more than 50% of API attacks, while 84% of security professionals experienced an API security incident in the past year. The average cost to remediate API incidents was $591,404 in the United States, increasing to $832,801 in the financial services sector.
Read Post
wallarm

Scaling API Security Without the Complexity: Lessons from Early Adopters

Sep 11, 2025 By Wallarm In Wallarm
APIs are a blessing and a curse. They’re the backbone of the modern internet. They also expose complex behaviors that are often poorly documented, stitched together across legacy and cloud systems, and updated faster than security teams can review. Three key groups typically shoulder the burden of protecting them: When these groups work in silos, gaps appear. Security becomes fragmented, reactive, and expensive to maintain. This is where Wallarm Security Edge comes in.
Read Post

When Secure Isn't Safe Uncovering OWASP Top 10 Business Logic Abuse

Sep 10, 2025 By Wallarm In Wallarm
The OWASP Top 10 for Business Logic Abuse reveals the most critical ways attackers exploit the design of your applications, not just their code. Business logic abuse isn’t about SQL injection or XSS, it's about bypassing the rules, manipulating workflows, and triggering unintended behaviors in ways your functional tests never anticipated. Why this Matters? Attackers are shifting from exploiting code flaws to abusing the intended functionality of your applications.These logic-level threats are particularly dangerous because they.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.