Estrategia de seguridad de API

Las oportunidades de crecimiento económico que prometen las API son inmensas, pero para aprovecharlas, los CISO deben garantizar la protección de sus API.

With the industry moving to microservices and API-driven applications, new security threats and attack vectors have emerged. The PCI Security Standards Council has worked to address these threats in its newest PCI DSS 4.0 standard.

It’s not enough to find and block attackers exploiting a vulnerability in your API. You will also want to remediate the security gap in your APIs.

Insights regarding two new vulns that have been uncovered in the OpenSSL library — CVE-2022-3602 and CVE-2022-3786. These vulnerabilities affect OpenSSL.

Why are we seeing such a constant stream of API-based attacks? Quite simply, APIs are lucrative for attackers.

Zombies, Shadows, and Ghosts hide in plain sight as APIs in your infrastructure, quietly extending your attack surface, patiently waiting to be called upon by some black hat.