Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Postman API Security Testing Tutorial

Mar 24, 2025 By VISTA InfoSec In VISTA InfoSec
According to a recent study by OWASP, 70% of all web applications are vulnerable to security risks. API security testing is one of the most effective ways to mitigate these risks. Postman is a popular tool for API security testing, with over 10 million users worldwide. In today's digital world, APIs are the backbone of most applications. As a result, they are also a prime target for hackers. This is why it's important to perform security testing on your APIs to ensure that they are not vulnerable to attack.
View Video
datadog

How to secure HTTP headers in your synthetic tests

Mar 24, 2025 By Addie Beach In Datadog
HTTP headers are a crucial part of web app network communication. These headers are fields within HTTP responses and requests that provide specifications for activities like data handling and session verification, helping clients and servers effectively relay messages to each other. They often contain a wealth of valuable information, including client IP addresses, authorization credentials, and device model details.
Read Post
knowbe4

The Human Element: Addressing Cybersecurity Risk in Danish and Swedish Organizations

Mar 24, 2025 By Martin Kraemer In KnowBe4
We recently conducted research in Denmark and Sweden to understand security culture in local organizations better. This research reveals a critical vulnerability in Danish and Swedish organizations - nearly 70% of employees in Denmark and 72% of employees in Sweden receive no cybersecurity training at their workplace. This gap in security awareness creates vulnerabilities that could affect organizations at every level.
Read Post
knowbe4

Act Now: Phishing-as-a-Service Attacks are on the Rise

Mar 24, 2025 By Stu Sjouwerman In KnowBe4
Phishing-as-a-service (PhaaS) platforms drove a surge in phishing attacks in the first two months of 2025, according to researchers at Barracuda. PhaaS platforms, which provide criminals with a ready-made kit for launching advanced phishing attacks, were responsible for more than a million attacks in January and February. Three PhaaS platforms accounted for nearly all of these attacks, with the Tycoon 2FA kit dominating the market.
Read Post
Arctic Wolf

Alleged Oracle Cloud Supply Chain Attack: Six Million Records Stolen, 140K Companies Affected

Mar 24, 2025 By Andres Ramos In Arctic Wolf
On March 20, 2025, a Breach Forums user, “rose87168,” claimed to have stolen six million records from Oracle Cloud’s SSO and LDAP services and offered the data for sale or in exchange for zero-day exploits. Breach Forums is a known marketplace for cybercriminals to trade stolen data and exploits.
Read Post
bluevoyant

The Future of Agentic AI

Mar 24, 2025 By Mona Ghadiri In BlueVoyant
Last April, Microsoft Security Copilot taxied down the runway and took flight to help passengers onboard to reach new destinations in cyber defense. BlueVoyant, as a Microsoft Security Copilot pre-launch design advisory council member, was a trusty flight attendant that helped Security Copilot safely take off. Today, as Security Copilot has reached its cruising altitude, Microsoft announced Security Copilot agents that help its passengers to further optimize Microsoft Security tools usage.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.