ShiftLeft released a new version of NextGen Static Analysis (NG SAST), including new workflows, purpose-built for developers that significantly improve security, while enhancing productivity.
Widespread API Use Heightens Cybersecurity Risks
February 05, 2018
IT professionals show a heightened concern for cybersecurity risk related to API use, according to a new survey conducted by Imperva.
Specifically, 63 percent of respondents are most worried about DDoS threats, bot attacks, and authentication enforcement for APIs.
APIs power the interactive digital experiences users love and are fundamental to an organization’s digital transformation. However, they also provide a window into an application that presents a heightened cybersecurity risk. The survey shows that more than two-thirds (69 percent) of organizations are exposing APIs to the public and their partners and that organizations are on average managing 363 different APIs.
Public-facing APIs are a key security concern because they are a direct vector to the sensitive data behind applications. 80 percent of organizations use a public cloud service to protect the data behind their APIs with most people using the combination of API gateways (63.2 percent) and web application firewalls (63.2 percent).
“APIs represent a growing security risk because they expose multiple avenues for hackers to try to access a company’s data,” said Terry Ray, CTO for Imperva. “To close the door on security risks and protect their customers, companies need to treat APIs with the same level of protection that they provide for their business-critical web applications.”
92 percent of IT professionals believe that DevSecOps, the combination of development, security and operations, will play a part in the future of application development. This highlights an increased desire from many organizations for security to be built in from the very beginning of software development rather than as an after-thought.
“It is very encouraging that the majority of respondents to our survey expect DevSecOps to be involved in the future of application development. Cybercrime is pervasive, and it is vital that organizations keep their applications safe from hackers. Embracing DevSecOps provides organizations with the building blocks needed for defense against some of the most serious cybersecurity threats,” Ray concluded.
Industry News
July 09, 2020
RunSafe Security announced a partnership with JFrog that will enable RunSafe to supercharge binary protections via a simple plugin that JFrog users can deploy within their Artifactory repositories and instantly protect binaries and containers.
July 09, 2020
LeanIX closed $80 million in Series D funding led by new investor Goldman Sachs Growth.
July 08, 2020
Afi.ai introduced Afi Data Platform, a cloud-based replication and resiliency service that helps to monitor, predict downtime and recover K8s applications.
July 08, 2020
D2iQ announced the release of Conductor, a new interactive learning platform that enables enterprises to access hands-on cloud native courses and training.
July 08, 2020
SUSE entered into a definitive agreement to acquire Rancher Labs.
July 07, 2020
Micro Focus announced AI-powered enhancements to the intelligent testing capabilities of the UFT Family, a unified set of solutions designed to reduce the overall complexity of automating the functional testing processes.
July 07, 2020
Push Technology announced the launch of a new Service API capability for Diffusion Cloud, Push’s Real-Time API Management Cloud Platform.
July 07, 2020
Lightrun exited stealth and announced $4M in seed funding for the first complete continuous debugging and observability platform for production applications.
July 01, 2020
JFrog announced the launch of ChartCenter, a free, security-focused central repository of Helm charts for the community.
July 01, 2020
Kong announced a significant upgrade to open source Kuma, Kuma 0.6, available today.
July 01, 2020
Compuware Corporation, a BMC company, announced new capabilities that further automate and integrate test data and test case execution, empowering IT teams to achieve high-performance application development quality, velocity and efficiency.
June 30, 2020
Couchbase announced the general availability of Couchbase Cloud, a fully-managed Database-as-a-Service (DBaaS).
June 30, 2020
Split Software announced new capabilities designed to accelerate the adoption of feature flags in large-scale organizations.
June 30, 2020
WhiteHat Security announced a discounted Web + Mobile Application Security bundle to help organizations secure the digital future.
