Tag: api
-
The financial impact of API and bot attacks on large enterprises
First seen on scworld.com Jump to article: www.scworld.com/native/the-financial-impact-of-api-and-bot-attacks-on-large-enterprises
-
‘CrossBarking’ Attack Targeted Secret APIs, Exposing Opera Browser Users
Using a malicious Chrome extension, researchers showed how an attacker could use a now-fixed bug to inject custom code into a victim’s Opera browser t… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/crossbarking-attack-secret-apis-expose-opera-browser-users
-
Hackers Exploit DocuSign APIs for Phishing Campaign
Cybercriminals are exploiting DocuSign’s APIs to send highly authentic-looking fake invoices, while DocuSign’s forums have reported a rise in such fra… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/hackers-exploit-docusign-apis-for-phishing-campaign/
-
ChatGPT-4o can be used for autonomous voice-based scams
Researchers have shown that it’s possible to abuse OpenAI’s real-time voice API for ChatGPT-4o, an advanced LLM chatbot, to conduct financial scams wi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chatgpt-4o-can-be-used-for-autonomous-voice-based-scams/
-
Top Traceable API Security Alternative: Escape vs. Traceable
Tags: apiFirst seen on securityboulevard.com Jump to article: securityboulevard.com/2024/11/top-traceable-api-security-alternative-escape-vs-traceable/
-
Wichtiger API-Key erbeutet: Neuer Cyberangriff trifft Internet Archive
Dieses Mal wurden über ein System der Organisation massenhaft E-Mails verschickt. Der Angreifer scheint derselbe zu sein, der zuletzt Nutzerdaten erbe… First seen on golem.de Jump to article: www.golem.de/news/wayback-machine-internet-archive-schon-wieder-attackiert-2410-190020.html
-
Private API compromise possible with now-patched Opera bug
Tags: apiFirst seen on scworld.com Jump to article: www.scworld.com/brief/private-api-compromise-possible-with-now-patched-opera-bug
-
Leading the Way in API Security: Which U.S. States Are Setting the Standard?
With just days to go before the U.S. election, securing our digital landscape is more critical than ever. Our latest infographic, Vote for API Securit… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/leading-the-way-in-api-security-which-u-s-states-are-setting-the-standard/
-
Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks
Bad actors have been observed targeting Docker remote API servers to deploy the SRBMiner crypto miner on compromised instances, according to new findi… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/cybercriminals-exploiting-docker-api.html
-
‘CrossBarking’ Attack Targets Secret APIs, Exposes Opera Browser Users
Using a malicious Chrome extension, researchers showed how an attacker could use a now-fixed bug to inject custom code into a victim’s Opera browser t… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/crossbarking-attack-secret-apis-expose-opera-browser-users
-
API Security Matters: The Risks of Turning a Blind Eye
Willfully ignoring important security issues to make our lives easier is, unfortunately, something that does happen in the security field. The post A… First seen on securityweek.com Jump to article: www.securityweek.com/api-security-matters-the-risks-of-turning-a-blind-eye/
-
Product showcase: Shift API security left with StackHawk
With the proliferation of APIs, and the speed at which AI functionality is helping fuel innovation, a strategic approach for securing APIs is no longe… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/30/product-showcase-stackhawk/
-
DEF CON 32 AppSec Village Gridlock The Dual Edged Sword of EV and Solar APIs in Grid Security
Authors/Presenters:Vangelis Stykas Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their timely DEF CON 32 erudite cont… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/def-con-32-appsec-village-gridlock-the-dual-edged-sword-of-ev-and-solar-apis-in-grid-security/
-
Securing APIs in Retail: Safeguarding Customer Data
The retail industry’s digital transformation has made secure APIs essential to modern operations since they are at the core of this shift. APIs power … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/securing-apis-in-retail-safeguarding-customer-data/
-
Survey Surfaces Fundamental Weaknesses in API Security
Traceable AI today published a global survey of 1,548 IT and cybersecurity professionals that finds well over half (57%) work for organizations that h… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/survey-surfaces-fundamental-weaknesses-in-api-security/
-
Salt Security and Dazz: A Powerful Partnership for API Security
As organizations adopt more modern application strategies, APIs are increasingly important for enabling seamless communication and data exchange. Howe… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/salt-security-and-dazz-a-powerful-partnership-for-api-security/
-
APIContext Joins Akamai’s Qualified Compute Partner Program to Boost Cloud Capabilities
APIContext, a company specializing in API-driven solutions, has joined Akamai Technologies’ Qualified Compute Partner Program as an Independent Softwa… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/10/18/apicontext-joins-akamais-qualified-compute-partner-program-to-boost-cloud-capabilities
-
Lessons from the Cisco Data Breach, The Importance of Comprehensive API Security
In the wake of Cisco’s recent data breach involving exposed API tokens – amongst other sensitive information – the cybersecurity community is reminde… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/lessons-from-the-cisco-data-breach-the-importance-of-comprehensive-api-security/
-
Deepfake Phone Scams for Less Than a Dollar a Pop
Academics Build AI Agent With OpenAI to Execute Phone Scams at Scale. Hackers can use OpenAI’s real-time voice API to carry out for less than a dollar… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/deepfake-phone-scams-for-less-than-dollar-pop-a-26652
-
Guest Essay: API security-related exposures rose steeply across all industries in Q3 2024
Application Programming Interfaces (APIs) have become the backbone of modern enterprises, facilitating seamless communication between both internal sy… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/guest-essay-api-security-related-exposures-rose-steeply-across-all-industries-in-q3-2024/
-
Trend: Der API-Markt wächst, aber Nutzer vernachlässigen die Sicherheit
Tags: apiFirst seen on heise.de Jump to article: www.heise.de/news/State-of-API-Report-Die-API-wird-zum-Produkt-Sicherheit-ist-nachrangig-9994054.html
-
DEF CON 32 AppSec Village 0 0 0 0 Day Exploiting Localhost APIs From The Browser
Authors/Presenters: Avi Lumel, skyGal Elbaz Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their timely DEF CON 32 eru… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/def-con-32-appsec-village-0-0-0-0-day-exploiting-localhost-apis-from-the-browser/
-
The Three Pillars of Shift-Left API Security
Tags: apiFirst seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/the-three-pillars-of-shift-left-api-security/
-
Cequence Security A Leader and Outperformer in GigaOm API Security Radar Report
Tags: apiCequence Security has been recognized as a Leader and Outperformer in the new GigaOm Radar for API Security report, highlighting our innovative approa… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/cequence-security-a-leader-and-outperformer-in-gigaom-api-security-radar-report/
-
Crooks are targeting Docker API servers to deploy SRBMiner
Threat actors are targeting Docker remote API servers to deploy SRBMiner crypto miners on compromised instances, Trend Micro warns. Trend Micro resear… First seen on securityaffairs.com Jump to article: securityaffairs.com/170144/malware/docker-remote-api-servers-srbminer.html
-
Fortinet warns of new critical FortiManager flaw used in zero-day attacks
Fortinet publicly disclosed today a critical FortiManager API vulnerability, tracked as CVE-2024-47575, that was exploited in zero-day attacks to stea… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fortinet-warns-of-new-critical-fortimanager-flaw-used-in-zero-day-attacks/
-
API Vulnerabilities Jump 21% in Third Quarter
Application programming interface (API) vulnerabilities surged 21% in the third quarter, with cloud-native infrastructure increasingly targeted by cyb… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/api-vulnerabilities-jump-21-in-third-quarter/
-
Researchers Debut AI Tool That Helps Detect Zero-Days
Vulnerability Tool Detected Flaws in OpenAI and Nvidia APIs Used in GitHub Projects. Security researchers have developed an AI tool that can detect re… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/researchers-debut-ai-tool-that-helps-detect-zero-days-a-26575
-
Vulnerability in Acrobat Reader could lead to remote code execution; Microsoft patches information disclosure issue in Windows API
First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/vulnerability-roundup-sept-11-2024/
-
Beyond Passwords: Advanced API Authentication Strategies for Enhanced Security
Passwordless authentication for end users is taking the world by storm, offering organizations and individuals alike unprecedented security, user expe… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/beyond-passwords-advanced-api-authentication-strategies-for-enhanced-security/