Posts Tagged

API Attack Analysis

What Can be Learned from the JumpCloud Security Incident

The JumpCloud incident highlights the fact that organizations must be aware of risks in regards to their cloud service providers.

Nick Rago

July 27, 2023

Top Changes in the OWASP API Security Top 10 2023RC

Salt Security shares insights on the initial release candidate for the API Security Top 10 2023.

Yaniv Balmas

March 12, 2023

T-Mobile API Breach – What Went Wrong?

In general, most API data breaches are usually the result of one or a combination of four different attack scenarios.

Nick Rago

January 24, 2023

Salt Customer Attack Case Study: Blocking a Low-rate-per-bot HTTP DDoS Attack

Relying on WAFs alone for API protection is insufficient and leaves companies vulnerable.

Eran Atias

January 12, 2023

OpenSSL Vulnerability Analysis – Denial of Service and Remote Code Execution

Insights regarding two new vulns that have been uncovered in the OpenSSL library – CVE-2022-3602 and CVE-2022-3786. These vulnerabilities affect OpenSSL.

Salt Labs

November 3, 2022

Recap: The 7 Biggest API Security Incidents in 2021

We’ve spotlighted the seven biggest API security incidents in 2021 that plagued many different companies of different sizes and across verticals and highlighted what we can take away from each event.

Michael Isbitski

December 21, 2021

The Log4Shell CVE-2021-44228 Vulnerability: What it is, how it works, and how to protect yourself

News of the recently discovered vulnerability called “Log4Shell,” “LogJam,” or its formal designation “CVE-2021-44228” has deservedly earned widespread attention. Learn what it is, how it works, and how to protect yourself.

Salt Labs

December 11, 2021

API Threat Research: GraphQL Authorization Flaws in Financial Technology Platform

Salt Labs researchers investigated a large B2B FinTech platform that offers financial services in the form of API-based mobile apps and SaaS to SMB and commercial brands.

Salt Labs

December 8, 2021

API Threat Research: Elastic Stack Misconfiguration Allows Data Extraction

Salt Labs researchers investigated a large business-to-consumer (B2C) online platform that provides API-based mobile applications and software as a service to millions of users globally.

Salt Labs

September 29, 2021

Top Findings from Industry’s First State of API Security Report

Learn what pain points we uncovered as we set out to understand the state of API security – a critical window into broader enterprise security trends given that APIs underlie every revenue-generating application today.

Michelle McLean

February 3, 2021

Unpacking the Parler Data Breach

While the shutdown of Parler remains politically charged, the event offers some valuable technical lessons worth reviewing, many of which tie directly into API security and how best to protect sensitive data.

Michael Isbitski

January 21, 2021

Subscribe to the Salt blog

Learn about the Salt + CrowdStrike Falcon integration

API Attack Analysis

What Can be Learned from the JumpCloud Security Incident

Top Changes in the OWASP API Security Top 10 2023RC

T-Mobile API Breach – What Went Wrong?

Salt Customer Attack Case Study: Blocking a Low-rate-per-bot HTTP DDoS Attack

OpenSSL Vulnerability Analysis – Denial of Service and Remote Code Execution

Recap: The 7 Biggest API Security Incidents in 2021

The Log4Shell CVE-2021-44228 Vulnerability: What it is, how it works, and how to protect yourself

API Threat Research: GraphQL Authorization Flaws in Financial Technology Platform

API Threat Research: Elastic Stack Misconfiguration Allows Data Extraction

Top Findings from Industry’s First State of API Security Report

Unpacking the Parler Data Breach

Tags

Posts by