Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

August 2022

Building a secure API with gRPC

A Google remote procedure call (gRPC) is Google’s open source version of the remote procedure call (RPC) framework. It’s a communication protocol leveraging HTTP/2 and protocol buffer (protobuf) technologies. gRPC enables a remote client or server to communicate with another server by simply calling the receiving server’s function as if it were local. This makes communicating and transferring large data sets between client and server much easier in distributed systems.

Announcing: Code-free API log collection and parser creation

AT&T Cybersecurity is pleased to announce a code-free way for our USM Anywhere customers to make their own API-driven log collectors and custom parsers. This big advancement in threat detection and response technology will make it possible for customers to collect information from a much larger variety of sources and SaaS services without having to request new integrations or log parsers.

API authentication and authorization best practices

Learn about API authentication and authorization best practices to ensure your APIs are secure. While we often use the terms interchangeably, authorization and authentication are two separate functions. Authentication is the process of verifying who a user is, and authorization is the process of verifying what they have access to.

Comprehensive Risk-based API Protection

Comprehensive Risk-baed API Protection: Inappropriate API protection keeps your company at a high level of risk. AppTrana protects web apps and APIs by addressing advanced threats with absolute precision. Operating in a risk-based approach enables unparalleled visibility of how your web apps and APIs are attacked. Watch: How AppTrana discovers and automatically protects all digital touchpoints with WAAP Security.

AWS RDS data security best practices

Amazon’s Relational Database Service (AWS RDS) allows you to offload the responsibility of managing a database, but it also comes with the risk of another external dependency. Fortunately, AWS provides some tools and settings to help with this. When you combine your existing data security policy with the AWS tooling and the advice in this article, you'll be well on your way to managing risk more effectively. Let's dive in with 15 AWS RDS data security best practices.

Rubrik and GraphQL - Episode 4 - Powershell

Powershell is by far the most widely utilized SDK that Rubrik provides. While an SDK is currently under development to cover off everything Rubrik Security Cloud and GraphQL, this episode will show you how to make raw GraphQL API calls into the Rubrik platform using the infamous scripting tool. You will see how to form various queries and mutations within Powershell, and how to parse the returned responses - performing real-world automation scenarios with Powershell and Rubrik.

Rubrik and GraphQL - Episode 2 - GraphQL Queries

At the core of GraphQL lies the query. Queries allow us to fetch exactly the data we need from the Rubrik platform. This episode will dive into how we form basic queries to retrieve Rubrik objects for usage with automation. We’ll talk about how to form a query, create fragments, and pass data into our queries using variables.

The ultimate guide to securing data for Rails developers

Secure your apps! Protect sensitive data! Easy to say, harder to find solid answers on all the bits and pieces you need to adjust to make sure that happens. That's why we've put together this list of practical advice for securing your Ruby on Rails applications. Whether you're a Rails developer or work on any stack that relies on cloud technologies, we think you'll find something that stands out.

Data Security Controls: Six Types and How to Implement Them

According to IBM's 2021 report, the average data breach cost more than $4 million worldwide in 2021. In the United States, that number rises to $8 million. That's an over 10% increase over the previous year. So, data breaches are a significant business risk. But costs aren't the only reason to tighten your security. Breaches hurt your clients and your company's reputation. You've seen data breaches in the news. Every day brings news of a fresh attack.

Mend API Helps Make SBOMs Simple

The proliferation of third-party software components such as open source software(OSS) has triggered a growing need to keep track of it all. Why? Because when security vulnerabilities inevitably crop up in open source components, it’s pretty important to know whether your company uses that piece of code – or whether it appears in the myriad software dependencies inherent in open source.

Data Discovery: A Detailed Guide to the What, Why, and How

Modern business runs on data. Even companies that produce and sell physical products create, store, and use data. They need it to find customers, maintain relationships, sell products, and monitor costs and profits. Therefore, data is valuable. It's worth protecting, especially when you consider how often we hear about bad actors stealing it. But you can't protect something you don't know you have. You need a complete picture of what data your business is producing, storing, and using.

Uncovering the scraper bots plaguing APIs

Most cyber threats — like credential stuffing and card cracking — are committed by fraudsters with the aim of stealing money, data, or both. The law is clear on these cyberattacks: online fraud is illegal. But unlike these overtly malicious threats, web scraping isn’t always illegal, or even unethical. Aggregator sites like travel agencies and price comparison websites use scraper bots to help customers find the best deals.

5 Misconceptions About API Security Testing for Mobile

The use of Application Programming Interface has skyrocketed with the rapid adoption of cloud, web, and mobile apps. Accordingly, API security testing has had to move into a completely different phase owing to the complexity as well as time and resource limitations. API testing involves testing the APIs directly, including their functionality, reliability, performance, and security.

Detect risks of data breaches proactively with Bearer

Software-driven organizations that process sensitive data are increasingly exposed to risks of data breaches. The IBM Cost of a Data Breach Reports reminds us that the average cost of a data breach rose from $3.86M to $4.24M (2021) and that the chance for an organization to experience a data breach within two years is 29.6% (2019).

Data Breach Mitigation: 6 Steps You Can Take

Data breaches happen to companies across all industries, even within highly secure organizations. In fact, 45 percent of companies experienced a data breach in 2021, a figure that’s bound to increase this year. While you can’t always prevent a data breach, there are steps that you can take to mitigate the damage. It’s also possible to fortify your defenses so your organization is ready if and when the next attack occurs.