Issue 267: AI to replace Pentesters, Radware Threat report, API bugs at Medefer and Zitadel, API holes in OpenBanking
Brief
This week, we share the Radware 2024 threat report highlighting APIs as a primary target of attacks. We also look at API vulnerabilities reported in the Medefer health platform and Zitadel’s identity management solution. The Hacker News investigates if Pentesters are about to go extinct, and finally we have an article on Open Banking and API security challenges in APAC.
Industry Report: Radware report highlights API vulnerabilities
Radware has published a new industry report analyzing attack trends in 2024. The section on “Web Application and API Threats” distinguishes API attacks primarily targeting API business logic or core functionality.
This represents a unique challenge for API security, as attacks often target bugs specific to the functionality or data of each API. This makes it extremely difficult to apply generic security controls to effectively protect APIs against attacks.