Issue 232: API attacks surge, the silent threat of APIs, Jumpcloud incident review
Brief
This week, we have articles on the surge in API attacks as cybercriminals increasingly target financial services and new data on the silent threat of APIs. We have a retrospective on the recent Jumpcloud incident from an API perspective and a great guide on seven things about API security from Philippe de Ryck. We conclude with a look at the OAuth. Tools portal, and another guide from Dana Epp.
Article: API attacks surge as cybercriminals target financial service
In the first of our articles this week on the rise of API security risks, we cover a report from CSOOnline discussing the increase in attacks on APIs and web apps in the financial services industry. According to a report from Akamai, Q2 saw a 65% rise year on year in such attacks, with the majority directed at banks.
The report covers over 340,000 servers in 4,000 locations and also reports a rise in Layer 3/4 DDoS attacks.