The API Security Blog | Salt Security

Featured Blogs

What is API Security? Your complete guide

What are API Attacks, Why They’re Different, and How to Stop Them

Traveling with OAuth - Account Takeover on Booking.com

OWASP API Security Top 10 2023 Explained

The State of the CISO 2023: Navigating Security Challenges Resulting from Today’s Digital-first Economy

Latest State of API Security report: 400% increase in attackers and more!

Oh-Auth - Abusing OAuth to take over millions of accounts

It’s extremely important to make sure your OAuth implementation is secure. The fix is just one line of code away. We sincerely hope the information shared in our blog post series will help prevent major online breaches and help web service owners better protect their customers and users.

Aviad Carmel

October 24, 2023

Salt Security Update - Situation in Israel October 2023

We want to thank our customers, partners and friends for the calls and messages to our team showing your concern and support.

Roey Eliyahu

October 11, 2023

Awards Season Never Stops at Salt!

Salt continues to receive accolades for the Salt Security API Protection Platform – all year round! This time we have been honored with the “Best API Security” award in the 2023 API Awards.

Michelle McLean

September 21, 2023

Strengthening our CrowdStrike Bond with Falcon Integration

We’ve further strengthened our partnership with the new “better-together” story of Salt and the CrowdStrike Falcon® platform.

Gilad Barzilay

September 19, 2023

Starting a New Adventure with Old Friends

Michael Porat joins Salt Security as senior vice president, corporate and business development.

Michael Porat

September 12, 2023

In the Alleys of Black Hat and DEF CON 2023: The Quiet API Security Crisis

Despite the omnipresence of APIs in today's digital infrastructure, Black Hat curiously lacked sessions solely dedicated to API security. Yet, a significant portion of the web application attack talks highlighted the looming threat posed by APIs.

Salt Technical Engineering

August 23, 2023

The Salt Technical Ecosystem Partner (STEP) Program – Step 1: API Testing

We have breaking news! Today we’re launching our Salt Technical Ecosystem Partner (STEP) Program, to accelerate how we can tap the deep API insights of the Salt platform to enrich the API ecosystem.

Nick Rago

August 23, 2023

Salt Wins Prestigious SC Magazine Award – “Best API Security Solution”

It never gets old! We’re excited to share that Salt has won yet another award – our 15th award this year! This time, we have been named the “Best API Security Solution” in the renowned 2023 SC Awards.

Michelle McLean

August 21, 2023

What Can be Learned from the JumpCloud Security Incident

The JumpCloud incident highlights the fact that organizations must be aware of risks in regards to their cloud service providers.

Nick Rago

July 27, 2023

Excited to be the New Salter on the Block!

Ori Bach is thrilled to lead Salt's product team. He believes we can make a huge difference to organizations worldwide by enhancing and improving what already is the industry’s leading API security platform.

Ori Bach

July 26, 2023

Understanding API Attacks: Why Are They Different and How Can You Stop Them

Salt has just released a new resource for business and security leaders – “Understanding API Attacks: Why Are They Different and How Can You Stop Them.”

Stephanie Best

July 20, 2023

State of API Security: Financial Services and Insurance

Salt Security releases its first industry-specific report on API security: the 2023 “State of API Security for Financial Services and Insurance.”

Stephanie Best

July 19, 2023

Australian Energy Leader Picks Salt for API Security!

Jemena, a leading energy company in Australia, has selected the Salt Security API Protection Platform to protect its critical gas and electricity infrastructure.

Stephanie Best

July 12, 2023

The State of the CISO 2023: Navigating Security Challenges Resulting from Today’s Digital-first Economy

Salt is thrilled to share the findings from the just-released “State of the CISO 2023” report! Learn how digital transformation is impacting the CISO/CSO role and understand the biggest challenges they’re contending with as a result.

Michelle McLean

June 21, 2023

CVE-2023-34362 - Zero-Day Vulnerability Discovered in MOVEit Transfer is Exploited in the Wild by Cl0p Ransomeware – Here’s What you Need to Know

On May 29, 2023, a critical security vulnerability, identified as CVE-2023-34362, was published. Learn the details of this vulnerability, its implications, and recommendations for users to mitigate the risk.

Salt Labs

June 14, 2023

Salt Announces Bi-directional Integration with Wiz!

Salt Security is building a bi-directional integration with the Wiz cloud security platform!

Gilad Barzilay

June 13, 2023

API10:2023 Unsafe Consumption of APIs

The unsafe consumption of APIs can lead to security breaches, exposing sensitive data, user credentials, or proprietary information, as attackers may exploit vulnerabilities in API usage to gain unauthorized access, execute arbitrary code, or perform unauthorized actions within the system.

Stephanie Best

June 6, 2023

API9:2023 Improper Inventory Management

Improper Inventory Management is the ninth security threat listed in the OWASP API Security Top 10. By exploiting this vulnerability, attackers can gain unauthorized access to sensitive data, or even gain full server access through old, unpatched or vulnerable versions of APIs.

Stephanie Best

June 6, 2023

Subscribe to the Salt blog

Salt Security blog

Welcome to our blog about all things in and around the world of APIs and API security.

Featured Blogs

Oh-Auth - Abusing OAuth to take over millions of accounts