Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

astra

Open Banking API Security: The Complete Guide for 2026

Apr 1, 2026 By Sanskriti Jain In Astra
Global Open banking API call volumes are set to cross the 720 billion mark by 2029, and attackers know it. With the global open banking market surging past $38 billion in 2025 itself and projected to exceed $115 billion by 2030, the financial data flowing through these APIs is highly lucrative for threat actors. With over 7.5 million calls made to just AI APIs, they have now graduated from a technical challenge to a business imperative.
Read Post
knowbe4

I Didn't Revoke my API Keys Because Claude Called Me An Idiot

Mar 24, 2026 By Javvad Malik In KnowBe4
I need to confess something. A few days ago whilst vibe coding at 2am (which can end up burning through tokens like they are going out of fashion) I accidentally pasted my API key directly into a Claude chat instead of the terminal window I had open. Claude told me off. It felt like a full, proper, disappointed parent tone; the AI equivalent of 'I'm not angry, just disappointed', except it absolutely was angry. There may have been paragraphs.
Read Post
Fortifying Your SaaS: A CISO's Guide to Secure Embedded Analytics

Fortifying Your SaaS: A CISO's Guide to Secure Embedded Analytics

Mar 24, 2026 By SecuritySenses In SecuritySenses
In the competitive SaaS landscape, differentiation is key. Product leaders are constantly searching for the next feature that will not only attract new customers but also increase the stickiness of their platform. Enter embedded analytics. The ability to provide users with interactive, real-time data visualizations directly within your application is no longer a luxury; it's an expectation. But as we rush to empower our customers with data, are we inadvertently opening a new front in the cybersecurity war? For every visually stunning dashboard, there's a potential attack vector waiting to be exploited. The question then becomes not if you should implement embedded analytics, but how you can do so without compromising your security posture. This guide will walk you through the critical security considerations, from data isolation to API security, ensuring your next product enhancement doesn't become your next data breach headline.
Read Post
miniorange

Secure Jira Cloud REST API Integrations: Beyond Atlassian Native Authentication

Mar 23, 2026 By Pallavi Narang In miniOrange
Jira Cloud APIs are widely used for automation and integrations across CI/CD, DevOps, reporting, and internal tools. Atlassian provides native REST API authentication using API tokens and OAuth. This works well for simple scripts and internal automation. However, modern organizations often require stronger controls when APIs are used by multiple services, integrations, and automated systems. As integrations grow, teams often need a more controlled authentication model than user-based tokens alone.
Read Post
wallarm

CISO Spotlight: Dimitris Georgiou on Building Security that Serves People First

Mar 23, 2026 By Wallarm In Wallarm
Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked in and around cybersecurity.
Read Post
salt security

Everyone Is Deploying AI Agents. Almost Nobody Knows What They're Doing.

Mar 18, 2026 By Roey Eliyahu In Salt Security
One constant I hear from CISOs I speak with is that AI agents are not coming. They are already inside organizations, reasoning through goals, selecting tools, and taking action through the same APIs that connect your most sensitive systems. And most security teams have no idea what those agents are doing.
Read Post

APIs Are Critical Infrastructure. Why Aren't We Treating Them That Way?

Mar 18, 2026 By Wallarm In Wallarm
‍In this session, we take an in-depth look at what it truly means to treat APIs as critical infrastructure. Using industry data and real-world examples, we explore the gap between how much businesses rely on APIs and how well they are actually protected. And we talk about why that gap introduces operational and regulatory risks.
View Video

AppSec in the age of AI: An RSA Conference preview

Mar 13, 2026 By Wallarm In Wallarm
Application security is at a breaking point as development teams move faster than ever, aided by AI-powered coding assistants. While these tools boost productivity, they also introduce subtle errors and insecure patterns at scale. The result: a growing backlog of vulnerabilities that outpaces traditional AppSec models. This webcast examines the risks and opportunities of AI in AppSec and who will be addressing it at RSA Conference. We’ll explore how defenders can use AI to level the playing field with automated scanning, intelligent prioritization, and secure-by-design practices.
View Video
salt security

An AI Agent Didn't Hack McKinsey. Its Exposed APIs Did.

Mar 13, 2026 By Roey Eliyahu In Salt Security
This week’s McKinsey incident should be a wake-up call for every enterprise moving fast to deploy AI. Not because AI itself is inherently insecure. But because too many organizations are still thinking about AI security at the model layer, while the real enterprise risk sits in the action layer: the APIs, MCP servers, internal services, and shadow integrations that AI agents can reach, invoke, and manipulate. That is the part most companies still do not see.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.