Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

APIs: The Invisible Backbone of Digital Transformation

APIs: The Invisible Backbone of Digital Transformation In today's app-driven economy, APIs (Application Programming Interfaces) have become the foundation for innovation and connectivity. A10's security experts Carlo Alpuerto and Jamison Utter explore the explosive growth in API development and adoption across industries. These powerful interfaces now power everything from financial services and retail experiences to transportation systems, IoT devices, autonomous vehicles, and smart city infrastructure.

Addressing API Security with NIST SP 800-228

APIs are quickly becoming the primary attack surface targeted by cyber criminals. The rise of generative AI systems, which run on APIs, has driven a dramatic increase in the number of APIs in use. How can you ensure your existing APIs and growing AI deployments remain secure, compliant, and resilient? NIST has now released an initial public draft of SP 800-228: Guidelines for API Protection for Cloud-Native Systems.

Beyond the Perimeter: How NYDFS 23 NYCRR 500 Principles Apply to the Expanding API Attack Surface

For financial institutions in New York, the NYDFS Cybersecurity Regulation (23 NYCRR 500) is a vital mandate that requires a strong and comprehensive cybersecurity framework. This regulation outlines numerous requirements aimed at safeguarding customer data and maintaining the integrity of financial systems.

API Threat Trends: How Attackers Are Exploiting Business Logic

As businesses rely more on APIs, attackers are quick to turn that trust into opportunity. Among the most dangerous and difficult-to-detect threats are business logic exploits, which let cybercriminals manipulate legitimate functionality to gain unauthorized access, exfiltrate data, or disrupt operations. These attacks often slip past traditional defenses unnoticed, making them a growing concern for security teams.

Strengthen Your Cyber Insurance Position: Why Proactive API Security is Key

Navigating the cyber insurance market in 2025 feels tougher than ever. Premiums are rising, requirements are stricter, and underwriters are scrutinizing security controls with unprecedented detail. While you're likely focused on endpoint security, MFA, and backups, are you overlooking a critical attack surface that insurers increasingly care about?

AppTrana's Enhanced API Protection: Complete Visibility, Instant Security

APIs are now prime targets for attackers, and as your API landscape grows, so does the challenge of securing it. AppTrana’s API protection just got more powerful—with new enhancements designed to deepen discovery, increase visibility, and strengthen security.