Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

APIs are now the most attacked layer in the application stack— APIs are being hit 68% more often per host than traditional web apps with APIs facing 1600% more DDoS traffic than web apps. This was found in the state of application security 2024 report where we analyzed 2 billion API attacks blocked on AppTrana WAAP. This isn’t surprising. APIs are inherently automation-friendly, often underprotected, and expose direct access to data and logic.

Over the past few weeks, the topic of tariffs has dominated headlines internationally. These trade measures have triggered global economic volatility, with the European Union (EU) pausing its retaliatory tariffs to allow room for negotiation. While the immediate focus is on economic ramifications, it's crucial to recognize the less visible, yet significant, impact these tariffs can have on cybersecurity infrastructures, especially in the realm of API security.

In today’s rapidly changing digital environment, APIs play a crucial role in modern business, facilitating smooth connectivity and data sharing. Yet, this interconnected nature brings significant security and privacy risks, as evidenced by the Federal Trade Commission's (FTC) recent settlement with GoDaddy. This settlement serves as a stark reminder that strong API security is no longer just a good security practice but is now a legal obligation.

Wallarm Research has just released a powerful new Nuclei template targeting a new kind of exposure: the Model Context Protocol (MCP). This isn’t about legacy devtools or generic JSON-RPC pinging. It’s about the protocol fueling next-gen LLM applications — and it’s already showing up exposed in the wild.

In today’s dynamic digital landscape, applications are the backbone of modern businesses. They drive operations, facilitate customer interactions, and manage critical data. However, the intricate web of rules and processes that govern these applications – the business logic – often presents a significant, yet frequently overlooked, attack surface.