Broken authorization is one of the most widely known API vulnerabilities. It features in the OWASP Top 10, AppSec conversations, and secure coding guidelines. Broken Object Level Authorization (BOLA) and Broken Function Level Authorization (BFLA) account for hundreds of API vulnerabilities every quarter. According to the 2026 API ThreatStats report, authorization issues ranked ninth in the API Top 10, “reflecting chronic difficulty in managing roles and permissions at scale.” Obviously, security and development teams know…
The shadow technology problem is getting worse. Over the past few years, organizations have scaled microservices, cloud-native apps, and partner…
API security has been a growing concern for years. However, while it was always seen as important, it often came…
It’s an unusually cold winter morning in Houston, and Craig Riddell is settling into his new role as Wallarm’s Global…
You probably think the security mantra “you can’t protect what you don’t know about” is an inarguable truth. But you…
APIs are one of the most important technologies in digital business ecosystems. And yet, the responsibility for their security often…
API security is becoming more important by the day and skilled practitioners are in high demand. Now’s the time to…
Is an AI-to-AI attack scenario a science fiction possibility only for blockbusters like the Terminator series of movies? Well, maybe…
Lefteris Tzelepis, CISO at Steelmet /Viohalco Companies, was shaped by cybersecurity. From his early exposure to real-world attacks at the…
This is a predictions blog. We know, we know; everyone does them, and they can get a bit same-y. Chances…
