Blog

How the Darknet Informs API Security Tactics

authentication,

API Secrets,

MFA

How the Darknet Informs API Security Tactics

By Corsha
on July 25, 2023

Do you know what goes on in the darknet? Well, your API security could be at stake. DarkOwl, a leading provider of darknet data, has observed conversations on the darknet on topics including hacking APIs, stolen API secrets that are then traded in underground digital...

Robust API Security Standards Are Essential for Your Security Strategy

authentication,

API Secrets,

zero trust

Robust API Security Standards Are Essential for Your Security Strategy

By Corsha
on June 06, 2023

Gartner projects that cybersecurity spending will grow by 11.3% in 2023 to more than $188.3 billion. Yet, many companies still leave their most vulnerable and most valuable resource unprotected against modern threats.

Corsha Survey Report: 50% of Security Respondents Have Experienced API-Related Breach – 50% Worry About One

authentication,

certificates,

API Secrets,

keys,

breach,

api gateway,

secrets management

Corsha Survey Report: 50% of Security Respondents Have Experienced API-Related Breach – 50% Worry About One

By Corsha
on January 19, 2023

Many security professionals have a problem with API secrets management practices. In fact, 50% of security professionals have experienced an API-related breach, while the other 50% worry about having one. This statistic is important to acknowledge because it clearly...

What We Learned From 2022’s API Attacks, Leaks, and Breaches

authentication,

certificates,

keys,

breach,

secrets management

What We Learned From 2022’s API Attacks, Leaks, and Breaches

By Corsha
on January 18, 2023

The drive for digital transformation has made APIs every organization’s MVP. They’re the glue that holds machine-to-machine communications together, facilitating the transfer of much-needed information from one machine to the next.

API Security Myth: The Bearer Model Is Enough

authentication,

API Secrets,

bearer model,

api gateway

API Security Myth: The Bearer Model Is Enough

By Corsha
on January 06, 2023

There’s a big problem with the bearer model. Let's explore where, why, and how the bearer model falls short when it comes to defending APIs from modern threats.

The API Secret Problem: How Companies are Spraying, Sprawling and Leaking Their Way Into Headlines

authentication,

API Secrets,

keys

The API Secret Problem: How Companies are Spraying, Sprawling and Leaking Their Way Into Headlines

By Corsha
on September 15, 2022

Over the course of the last few years there has been a steady increase in the number of data breaches resulting from compromised API keys. Bad actors seem to be able to quite easily get ahold of API keys, certificates and tokens in order to access sensitive data. These...

mTLS,

authentication,

certificates

What is mTLS and How Does It Work

By Corsha
on August 12, 2022

Securing communication over APIs between machines and the applications and services they run has always been a big priority for security and engineering teams. Protocols like SSL and TLS have provided enterprises with a way to encrypt data that is transferred within a...

How the Darknet Informs API Security Tactics

Robust API Security Standards Are Essential for Your Security Strategy

Corsha Survey Report: 50% of Security Respondents Have Experienced API-Related Breach – 50% Worry About One

What We Learned From 2022’s API Attacks, Leaks, and Breaches

API Security Myth: The Bearer Model Is Enough

The API Secret Problem: How Companies are Spraying, Sprawling and Leaking Their Way Into Headlines

What is mTLS and How Does It Work

Signup

Get started today