Security News

Using behavior analysis to solve API security problems
2017-09-12 14:00

When people think about complex security challenges, airport security might be the most familiar. The scope of challenges and implications of breaches are daunting. This is especially true when...

Attackers exploited Instagram API bug to access users’ contact info (Help Net Security)
2017-08-31 17:54

Instagram has confirmed that “one or more individuals obtained unlawful access to a number of high-profile Instagram users’ contact information — specifically email address and phone number — by...

Deprecated, Insecure Apple Authorization API Can Be Abused to Run Code at Root (Threatpost)
2017-08-24 14:32

An insecure Apple authorization API is used by numerous popular third-party application installers and can be abused by attackers ro run code as root.

Netflix Helps Identify APIs at Risk of Application DDoS Attacks (Security Week)
2017-08-01 16:41

Netflix has published tools and information to help defenders identify systems that could be leveraged by malicious actors for damaging application layer distributed denial-of-service (DDoS)...

VMware API Allows Limited vSphere Users to Access Guest OS (Security Week)
2017-07-28 14:30

LAS VEGAS - BLACK HAT USA - Researchers discovered that a VMware API can be abused by vSphere users with limited privileges to access the guest operating system without authentication. VMware has...

Elastic Beam Emerges From Stealth With API Security Solution (Security Week)
2017-06-21 12:39

Redwood City, Calif.-based Elastic Beam emerged from stealth mode on Wednesday with the launch of a security solution designed to detect and block cyberattacks targeting application programming...

DLP APIs: The next frontier for Data Loss Prevention (Help Net Security)
2017-06-19 14:00

According to the Breach Level Index, there have been 7,094,922,061 data records lost or stolen since 2013 with 4,417,760 records lost or stolen every day, 184,073 records every hour, 3,068 records...

OSIsoft Patches Flaws in PI Server, Web API Products (Security Week)
2017-06-14 17:49

California-based operational intelligence firm OSIsoft has released updates for its PI Web API and PI Server products to address several vulnerabilities, including ones rated high severity....

Week in review: PowerPoint malware delivery, dark web fraud guides, security through APIs (Help Net Security)
2017-06-12 01:00

Here’s an overview of some of last week’s most interesting news and articles: UK ICO offers grants for practical privacy research The programme is open to academic institutions, civil society...

Google Releases reCAPTCHA API for Android (Threatpost)
2017-06-09 19:38

Google has released a reCAPTCHA API for Android, a first for the mobile applications.