Today’s attack surface is shifting from the endpoint to the API, and AI and third-party SaaS are worsening the issue. CISOs offer advice for API defense. Recent breaches suggest attackers are shifting ...

Clearly, developers will have a lot on their plates – security researchers from Stanford University analyzed 10 million websites and found almost 2,000 API credentials across 10,000 of them. The keys ...

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Dany Lepage discusses the architectural ...

API cybersecurity will be a ping pong ball, battered between the rackets of AI-assisted attackers and AI-assisted defenders. SecurityWeek’s Cyber Insights 2026 examines expert opinions on the expected ...

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could allow attackers to access apps remotely. API Connect is an application ...

On Monday, Oct. 20 I got a notification that my science exam had been posted to Moodle. I went to check and nothing. Quickly, to my horror, I realized that my bank account, Slack, Workday, Steam — ...

Application Programming Interfaces have been the connective tissue of modern IT environments for decades, but the way they're being used is undergoing a fundamental shift. Once primarily a ...