Issue 191: API insecurity causing rising incidents, policy-as-code for API security
Brief
This week, we have a report from Imperva on the increasing security incidents caused by unsecured APIs. We also have articles on using policy-as-code to improve API security, views on how common assumptions may prevent effective API protection, and how open APIs are improving cloud-based security.
Report: One in thirteen incidents blamed on API insecurity
First up is PortSwigger’s coverage of a recent report sponsored by Akamai, in which over 117,000 cybersecurity incidents were analyzed to understand trends and patterns in them.
The first finding of report is that the occurrence of API-related incidents varied between 4. 1% and 7. 5%, with the likelihood directly proportional to the size of the organization: the bigger the company, the bigger the chances for API-related security incidents.