API security risks report exposes Netflix and Wordpress
Monday, November 27, 2023 by Richard Harris
Wallarm, the end-to-end API and app security company, announced the release of its Q3-2023 Wallarm API ThreatStats report. The quarterly report details the surge in threats centered around APIs and uncovers critical vulnerabilities, like injections and API data leaks, that have recently impacted leading firms, including Netflix, VMware, and SAP.
The new report i...
Developers and brands must make mobile apps far more secure
Tuesday, January 17, 2023 by Christian Hargrave
The bad guys are still breaking digital windows and kicking down digital doors, so to speak, and will continue well into 2023 and beyond!
Consumers through experience or gut instinct will demand that their mobile app providers deliver key security features including trying to stop the increasingly prevalent "man-in-the-middle" attacks. The latest techn...
Improving cloud security practices for DevOps teams
Thursday, August 26, 2021 by Richard Harris
Technology integration allows customers to securely leverage existing keys, secrets, tokens, and certificates into declarative CI/CD pipelines and ease the management of HashiCorp Vault infrastructure and security practices.
Opsera and HashiCorp partner with plans on improving cloud security practices for DevOps teams
Opsera, the Continuous Orchestration platform ...
Uptodown: An alternative to Google Play
Wednesday, June 2, 2021 by Richard Harris
The Uptodown app market has more than 130 million active users per month, and more than 450 monthly downloads of their more than 4 million APKs available. The company operates worldwide and it is localized to 15 different languages. The Spanish-based company was born in 2020 in Málaga and founded as a University Project in 2002. Recently we intervi...
GitHub secrets reveal API keys, usernames, passwords, and more exposed
Tuesday, March 30, 2021 by Richard Harris
Over two million secrets have been detected on public GitHub in 2020 and this number is growing 20% Year-Over-Year, a GitGuardian State of Secrets Sprawl on GitHub Report shows.
This growing volume of sensitive data or secrets, like API keys, private keys, certificates, usernames and passwords end up publicly exposed on GitHub, putting corporate security at...
The Twilio API for WhatsApp is now available
Tuesday, August 7, 2018 by Christian Hargrave
Twilio has announced the Twilio API for WhatsApp that lets Twilio customers message with their users via WhatsApp for the first time. Twilio removes the operational overhead of managing and scaling WhatsApp for developers, making it a fast and reliable way for businesses to start communicating with the more than 1.5 billion users of WhatsApp. With one API, develope...
Most cryptocurrency mobile apps are vulnerable
Thursday, November 30, 2017 by Christian Hargrave
Over 1,300 crypto currencies exist today with over $300 Billion market capitalization. One of the most popular and oldest cryptocurrency - Bitcoin has almost reached $10,000 price after several months of fluctuation, but continuous and steady growth.A wide spectrum of mobile applications for cryptocurrencies were released during the last few years by various startups, i...
Glitch for Platforms launches to help Glitch developers
Thursday, May 25, 2017 by Christian Hargrave
Fog Creek Software has launched Glitch for Platforms, a collection of tools that helps Developer Relations teams.Glitch for Platforms allows Developer Relations teams to leverage the power of Glitch and provide sample apps to kickstart developers building on top of their APIs. There is a range of free and paid-for tools, which they can use to create unlimited sample pro...
WaveMaker Adds Security Enhancements to Its Rapid Application Development Platform
Friday, July 15, 2016 by Richard Harris
WaveMaker has announced two new security enhancements to its enterprise-class Rapid Application Development platform. The WaveMaker platform now supports Single Sign-on for WaveMaker-built and deployed applications using Central Authentication Server (CAS), which permits users to access multiple applications by providing credentials such as UserID and password only once...
Open Source WSO2 API Manager 1.9 Now Available
Monday, June 22, 2015 by Richard Harris
WSO2 has enhances the API management platform capabilities with the release of WSO2 API Manager 1.9, which is fully open source and runs on servers and in the cloud. With this latest version, WSO2 API Manager offers plugin support for third-party key servers, allowing companies to use their existing infrastructure to authenticate API consumers.WSO2 API Manager now suppo...
HashiCorp Launches Vault Security Platform for Cloud Environments
Friday, May 1, 2015 by Richard Harris
HashiCorp has launched Vault, a new tool for securely managing secrets and encrypting data in-transit. From storing credentials and API keys to encrypting passwords for user signups, Vault is being offered as a new solution for security in cloud environments.Vault secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secret...
AnyPresence Launches JustAPIs Platform to Build and Deploy RESTful APIs
Tuesday, April 14, 2015 by Stuart Parkerson
AnyPresence, an enterprise backend-as-a-service (MBaaS) provider, has released a new service called JustAPIs - a solution for building and deploying modern RESTful APIs.JustAPIs is designed to solve the API building challenge from the perspective of the enterprise app developer. The platform provides a quick, easy way to define and deploy APIs with specific signatures (...
Appboy Launches Intelligent Delivery Platform for Push Messaging Engagement on a Per User Level
Tuesday, November 18, 2014 by Stuart Parkerson
Appboy has introduced a new Intelligent Delivery offering which uses customized algorithms to allow app publishers to send messages at the exact moment when each user is most receptive to communication.The Intelligent Delivery algorithm analyzes previous interactions for each user to deliver push notifications, email and in-app messages at the peak of potential engageme...
The World Wide Leader in Sports Leaves Developers in a World of Hurt as ESPN Closes Public API
Tuesday, August 12, 2014 by Richard Harris
ESPN has announced that it is closing its public API and will no longer be issuing public API keys. Developers utilizing the ESPN API with a public API key will continue to do so until Monday, December 8, 2014, at which point the keys will no longer be active.ESPN launched the ESPN Developer Center in March 2012 and according to the company has evolved, “the capabilitie...
Apigee SmartDocs Provides Developers Method level API Documentation
Friday, May 9, 2014 by Richard Harris
Apigee, which provides API management solutions, has introduced SmartDocs, a method-level API documentation that offers both internal and external SEO benefits. API providers can generate docs by leveraging handlebars-driven templates, test the accuracy of their documentation with live requests, and control the layout, interactions, and look of docs. App devel...
