Wallarm Releases 2025 API ThreatStats Report, Revealing that APIs are the Predominant Attack Surface
"Wallarm's researchers tracked 439 AI-related CVEs, a staggering 1,025% increase from the prior year. Nearly all (99%) were directly tied to APIs, including injection flaws, misconfigurations, and new memory corruption vulnerabilities stemming from AI's reliance on high-performance binary APIs."
So what does make APIs special and different? #apisecurity #apihacking #apis #pentesting
1) Interconnectedness, even if you're sure you don't have APIs, I bet your suppliers do
2) Large attack surfaces that are poorly documented, they balloon into hundreds of endpoints quickly
The biggest mistake I see in API security will probably surprise you... Whether in offensive security or defending APIs, most teams make one fundamental mistake that leaves their APIs vulnerable, they forget that APIs are web applications.
#apisecurity #apihacking #apis
What is an API? What makes them special? And what kind of APIs are out there? #apisecurity #apis #bugbountytips #BugBounty
API keys grant access, but if compromised, they're open doors for attackers. But fear not regularly rotating keys and limiting scope can help minimize the damage, find out more in this blog #DevSecOps #APISecurity
https://www.traceable.ai/blog-post/dizzy-keys-why-api-key-rotation-matters
Ever wonder how secure your smart home devices really are? 
The latest Net API Notes article dives into a real-life API vulnerability that put millions of COX modems at risk. Discover four crucial API security questions any API producer should consider! 
#APISecurity #SmartHome #CyberSecurity #TechNews #APIs
https://netapinotes.com/uncovering-api-vulnerabilities-lessons-from-the-cox-modem-breech/
I lastly stumbled upon a list of 16 practices to secure your #APIs. In this two-post series, I’d like to describe how we can implement each item with #ApacheAPISIX (or not).
API. Keys. Are. Not. Security. Features.
It takes a village to run a village. We are looking for volunteers to help us bring AppSec Village at DEF CON 31 to life.
Learn more https://www.appsecvillage.com/volunteer
#dc31 #defcon #defcon31 #appsecvolunteers
#appsec #applicationsecurity #appsecurity #apisecurity
Mike Amundsen 
Register here: 
