Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

wallarm

Context is King: Using API Sessions for Security Context

Nov 12, 2024 By Wallarm In Wallarm
There’s no doubt that API security is a hot topic these days. The continued growth in API-related breaches and increase in publicized API vulnerabilities has pushed API security to the top of CISO’s lists. The tools in the market for API security still have room for improvement, of course. One of the challenges security practitioners face with APIs is understanding the context in which an attack took place.
Read Post
wallarm

The Hidden Costs of API Breaches: Quantifying the Long-Term Business Impact

Nov 11, 2024 By Wallarm In Wallarm
API attacks can be costly. Really costly. Obvious financial impacts like legal fines, stolen finances, and incident response budgets can run into the hundreds of millions. However, other hidden costs often compound the issue, especially if you’re not expecting them. This article will explore the obvious and hidden costs of API breaches, their long-term business impacts, and how you can communicate the importance of API security to business stakeholders and decision-makers.
Read Post

How Weak Access Controls Led to the Optus API Breach #accesscontrol #databreach #dataleaks

Nov 11, 2024 By Wallarm In Wallarm
Broken access controls are one of the leading causes of API breaches. Learn how weak access control can leave your data exposed, as we explore real-world examples and share insights on protecting sensitive information. Strengthen your API access controls to safeguard against unauthorized access and potential breaches!
View Video
wallarm

AI-Powered APIs: Expanding Capabilities and Attack Surfaces

Nov 7, 2024 By Wallarm In Wallarm
AI and APIs have a symbiotic relationship. APIs power AI by providing the necessary data and functionality, while AI enhances API security through advanced threat detection and automated responses. In 2023, 83% of Internet traffic traveled through APIs, but there was a 21% increase in API-related vulnerabilities in Q3 2024, severely impacting AI. The relationship between AI and APIs expands capabilities while simultaneously increasing potential vulnerabilities.
Read Post

Key Indicators of a Strong API Security Program - Do You Have Them? #securitymeasures #securitykey

Nov 7, 2024 By Wallarm In Wallarm
What does a successful API security program look like? Discover the essential indicators that every organization should monitor, from inventory control to continuous monitoring and anomaly detection. Learn how these key metrics can safeguard your APIs and ensure your defenses are ready for emerging threats!
View Video

Gaining Security Context with API Session Data

Nov 6, 2024 By Wallarm In Wallarm
API attacks don't always occur in a single request, and more sophisticated attacks require additional context. Whether it's account takeover or scraping, understanding the behavior of an attacker across a session is key to accurate detection and effective investigation. Today, organizations often lack the ability to delve into the details of specific API sessions. Data is spread across multiple tools, or simply unavailable. The Wallarm platform allows users to seamlessly navigate between attack detections and the surrounding session data to fully understand the behavior and interactions involved.
View Video
wallarm

Attackers Abuse DocuSign API to Send Authentic-Looking Invoices At Scale

Nov 4, 2024 By Wallarm In Wallarm
In a concerning trend, cybercriminals are leveraging DocuSign's APIs to send fake invoices that appear strikingly authentic. Unlike traditional phishing scams that rely on deceptively crafted emails and malicious links, these incidents use genuine DocuSign accounts and templates to impersonate reputable companies, catching users and security tools off guard.
Read Post
wallarm

How to Mitigate the Latest API Vulnerability in FortiManager

Oct 30, 2024 By Wallarm In Wallarm
Recently, a critical API vulnerability in FortiManager (CVE-2024-47575) was disclosed. Certain threat actors exploited it in the wild to steal sensitive information containing configurations, IP addresses, and credentials used by managed devices. In advanced notification emails, Fortinet warned its users of the vulnerability and mitigation steps. The vulnerability has a critical severity rating of 9.8 out of 10.
Read Post
wallarm

Reducing False Positives in API Security: Advanced Techniques Using Machine Learning

Oct 25, 2024 By Wallarm In Wallarm
False positives in API security are a serious problem, often resulting in wasted results and time, missing real threats, alert fatigue, and operational disruption. Fortunately, however, emerging technologies like machine learning (ML) can help organizations minimize false positives and streamline the protection of their APIs. Let's examine how.
Read Post

CISO Briefing: API Security is AI Security (API ThreatStats Q3 2024 Spotlight)

Oct 24, 2024 By Wallarm In Wallarm
API threats against AI are on the rise. The Wallarm Research team has researched and dissected the top API threats from the 3rd quarter of 2024. This report explores the top significant threats, notable API breaches, identifies key trends, and provides actionable insights that can help you strengthen your API Security program.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.