API security

API Security: Why the Old Web Rules No Longer Apply

API attacks are running ahead of traditional appsec. Pivot Point Security's podcast with Resurface Labs explains what defenders should actually…

API security

OWASP Top 10 in an API World: Why the Old Framework Is Not Enough

API-centric development has changed the attack surface. Pivot Point Security's podcast with Resurface Labs explains why OWASP is the baseline,…

Access Management

Is API Authentication the Easiest Door to Push Open in 2025?

API authentication attacks surged 681% in a year. We break down the data, the trade-offs, and what defenders should actually…

API security

Zero Trust and APIs: Why the White House Order Changes the Game

Federal zero-trust push meets rising API threats. What security teams need to know now.

API security

Shadow APIs Are Quietly Fueling the Bot Problem Nobody Talks About

Many APIs exist outside security teams' visibility. Here's what that means for your organization's actual attack surface.