Security News > 2023 > May > Top API vulnerabilities organizations can’t afford to ignore

75% of organizations typically change or update their APIs on a daily or weekly basis, creating a significant challenge for protecting the changing API attack surface, according to Data Theorem and ESG. Insecure APIs plague organizations.

In a related finding, study results also revealed the majority of organizations have experienced at least one security incident related to insecure APIs in the last 12 months, while the majority of organizations have experienced multiple security incidents related to insecure APIs during the past year.

To gather data for this report, ESG surveyed 397 respondents from private- and public-sector organizations in North America across IT, Security and Application Development on issues, challenges and trends around cloud native applications and API security.

To address these API security concerns, the study found that the leading approaches organizations will increase their spending on over the next 12-18 months are API security tools, Cloud-Native Application Protection Platforms - CNAPPs, and integrated application security and API security tools.

The second most cited security challenge with faster development cycles of CI/CD is that new builds are deployed to production with misconfigurations, vulnerabilities, and other security issues, followed by developers skipping security processes, and software released without security checks and/or testing.

"It's no surprise that most organizations are experiencing API-related security incidents," said Melinda Marks, Senior Analyst for Enterprise Strategy Group.

News URL

https://www.helpnetsecurity.com/2023/05/04/insecure-apis-in-organizations/