Discover how the PSTI Act 2022 and 2023 regulations shape IoT security, impacting manufacturers with new compliance standards and necessary steps for adherence.

Smart appliances offer convenience, but security flaws in CSC ServiceWorks' laundry system allowed free cycles, raising concerns over device safety.

CVE-2024-3400 targets Palo Alto GlobalProtect, allowing attackers to write arbitrary files and execute system commands. Learn best practices for preventing exploits.

During Data Privacy Week, the "Mother of All Breaches" exposes 26 billion records, emphasizing the urgent need for data protection.

Explore the shift to scraped data breaches, data scraping challenges, and the importance of early detection and GDPR compliance in our latest blog.

Master E-commerce API security this holiday season with tips to detect and prevent vulnerabilities using tools like OWASP Juice Shop and Burp Suite.

In the last few weeks, the security community has been shaken by a series of exploits targeting MOVEit, a popular file transfer software. These incidents have exposed critical vulnerabilities, allowing threat actors to compromise sensitive data and exploit organizations ranging from the BBS to several arms of the US Government.

Explore the major findings from the 2023 Verizon Data Breach Investigations Report in our latest blog post. We delve into the rise of social engineering attacks, the human element in breaches, the most affected sectors, and the significance of web application attacks in today's cybersecurity landscape.

In 2019, I hacked 30 bank mobile apps and APIs in coordination with domestic and international financial services and FinTech companies. In 2020-2021, I hacked 30 mobile health (mHealth) apps and FHIR APIs in coordination with healthcare providers, giving me access to thousands of patient records via their APIs due to broken authentication and authorization vulnerabilities. This year, in coordination with federal and state law enforcement agencies, I was able to take remote control of law enforcement vehicles through the automaker’s APIs.

Even the largest companies in the world are susceptible to API vulnerabilities. How modern security defenses fail — and how to fix them.

The majority of organizations rely heavily on third-party web applications connected through APIs to generate revenue and serve customers. In many cases, these web applications contain security vulnerabilities.

Better security rules increase false positives — which causes more complacency. Better tools for creating the context for more sophisticated rules and automated workflows can help.

Lacking the power of AI and machine learning, common security technologies miss API attacks by not seeing the broader business context. Here’s what happened at Shopify.

Most security defenses would have missed the Uber API authorization vulnerability. Here’s why.