Editor's News

APIContext has unveiled its 2024 Cloud Service Provider API Report, offering an in-depth examination of the performance of leading cloud service providers in the essential API domain. This annual global analysis scrutinised data stemming from 650 million API calls across over 10,000 distinct API endpoints. These interactions were sourced from a netwrok of over 100 geopraphically dispersed cloud data centers, encompassing major public cloud service providers such as AWS, Azure, Google, and IBM. The results...

Salt Security have announced the release of its new multi-layered OAuth protection package to detect attempts to exploit OAuth and proactively fix vulnerabilities. Salt is enhancing its API protection platform with a comprehensive suite of new OAuth threat detections and posture rules to address the growing challenge of OAuth exploitation. The company is the first API security vendor to launch deep OAuth threat detection capabilities, and these innovations will empower organisations to identify and mitigate...

Last week, the IT Security Guru team attended Cydea's Risk Management Platform launch in London. After the event, Robin Oldham, CEO and Founder of Cydea, sat down with the Gurus to answer some questions about risk management and why it's critical for businesses to take it seriously. Established in 2019, Cydea set out to expel fear, uncertainty and doubt when it comes to really understanding risk. They aim to manage and not abolish risk altogether....

Advanced Cyber Defence Systems (ACDS) has unveiled its groundbreaking Attack Surface Management (ASM) solution: OBSERVATORY. Engineered with a comprehensive three-pronged approach—Discovery, Validation, and Insight—OBSERVATORY offers an unparalleled level of network security.  As the number of internet-connected devices explodes, organisations struggle to keep track and secure them before attackers strike. Shockingly, surveys show 69% of companies have been hit by cyberattacks stemming from unidentified or unmanaged internet-facing assets. To address this critical challenge, ACDS has created...

Cydea, the cyber risk management provider, has announced the Cydea Risk Platform, set to quantify threats in financial terms to businesses, allowing them to visualise the consequences of different business security-related scenarios. By giving a monetary value to risks and cyber threats, the company says its new platform is designed to enhance Board-level communication, speed up decision-making, optimise investments and foster collaboration across all stakeholders. This includes business leaders, CISOs, IT teams and security professionals...

The Met Police, a long with a host of other global law enforcement agencies, have dismantled a criminal gang that used a technology service to facilitate fraudulent text messages, leading to theft from victims. The scam primarily targeted younger individuals familiar with the internet. The technology service, LabHost, aided scammers in sending deceptive messages and directing victims to fake websites resembling legitimate online payment or shopping services. The criminals obtained identity information, including card numbers...

Today Keeper Security have announced the addition of a passphrase generator to Keeper Web Vault, with support on mobile and for the browser extension coming soon. The release also includes an update to the existing password generator which provides users with new options to meet specific password requirements. In addition to being able to include uppercase letters, numbers and symbols, users can now select specific symbols to include or omit, based on the requirements of...

Today, Keeper Security have announced the introduction of Time-Limited Access and Self-Destructing Records, boosting secure access management for businesses. These features address the growing need for robust data protection in today's fast-paced environment. Enhanced Security and Compliance Time-limited access and self-destructing records automatically remove permissions after a set timeframe, minimizing the risk of privilege escalation and unauthorized access. This stricter control simplifies compliance with regulations like SOX, PCI DSS, and HIPAA. Streamlined Credential Sharing: Time-Limited...

New research by Netskope Threat Labs has revealed that IoT botnets, remote access tools and infostealers were the key malware families deployed by attackers targeting the retail sector in the past year. The findings were revealed in a new report on the retail sector. Retail has also undergone a shift in the past 12 months from predominantly Google Cloud-based applications towards Microsoft apps like Outlook. In last year’s report, Google applications were far more popular in...

Today, API security company Salt Security have announced the release of Pepper, an in-product assistant and, notably, an AI-powered knowledge-based assistant. Salt is embracing the value of artificial intelligence (AI) with this capability, making it easier for customers to utilise the company’s signature API protection platform and resolve queries as swiftly as possible. Pepper is the first of its kind to offer these capabilities to API security customers. Pepper can be used as customers’ all-knowing...