API Governance and Risk Management
Ayman Jaber is the chief internal auditor of the Halab Saudi payment company, one of the leading FinTech companies in...
API Security & Identity
API security & identity news and industry trends including OAuth2.0, OpenID Connect, smart tokens and User-Managed Access
The Great Balancing Act Security, UX and Identity
I recently moved house and after updating the most important services: internet, car insurance, tv, I decided to move on...
Gaining Trust in APIs and What to Look For
Anthony Dellavecchia is a developer evangelist at Twilio. This article discusses gaining trust in APIs and what you should look...
API MythBusters Crushing Five Security Myths that are Crushing Your Safety
Nick Rago is a field CTO and product strategist with Salt Security. This article by Nick discusses security myths related...
API Catalog: The First Step in Protecting your APIs
Dan Gordon is the DecSecOps Evangelist at Traceable AI. When we think of API security, many aspects must be considered....
Field Report Updates From the API Security Front Lines
Chuck Herrin, CISSP, CCSP, is the Chief Technology Officer & Board Member of Wib. Many attackers exploit API vulnerabilities and...
Automating API Governance
Nauman Ali is the Product Manager at Stoplight. This article by Nauman discusses API governance and how to automate some...
API Security in Open Banking Context
API regulations are at three levels to be followed by the respective entities and implementers. One is at the level...
Secure your Apps and APIs with strong authentication and Adaptive Access
I am John Gren. I'm a product owner for API security at Gravitee, a full solutions company offering full API...
Data, Data Everywhere…
Data can be classified as structured, unstructured, governed, ungoverned. They are collectively referred to as a data swamp. The 3D’s...
Shadow APIs require a search light of discovery
Rapid cloud-native services adoption leads to poor visibility of security risks and data vulnerabilities from uncharted APIs use Since early...
The State of 0Auth
You might be familiar with 0Auth from its use in buttons like these, the same with Facebook and sign in...
Data Deletion at Facebook
This is going to be about Deletion Framework, which is how Facebook (or Meta as it is now called) upholds...
Scorthter, Hacking Banks and Cryptocurrency Exchanges through their APIs
I am a content creator and my job is to create content that proves the efficacy of a security product...
APIs and Privacy in the European Legal Context : a study of 4000+ API Terms of Services
I work for the Digital Economy Unit that investigates how the information and communication technologies affect the economy and the...
Log4j 2 Vulnerabilities : A Walkthrough
The Log4j 2 flaw makes software running on millions of machines vulnerable to exploit. It could be attacking a server,...
Cyber-AI in APIs
What is Cyber-AI? Cybersecurity is very topical, it's front and centre for a lot of businesses. AI is an area...
4 ways Singapore uses digital identity to create seamless services
Kendrick Lee, Director, National Digital Identity at GovTech shared the impact of the SingPass project. Imagine trying to get dressed...
Secrets and Personally Identifiable Information (PII) Across Our API Definitions
As API providers and consumers we tend to have access to a significant amount of credentials, keys, tokens, as well...
An Introduction to API Authentication
APIs operate using the web, but like web applications, many API require some sort of authentication or authorization before you...
Page 1 of 2