White Papers in - information risk management

Raising the Bar for Web App and API Security

Palo Alto Networks is tackling this problem head-on with our Web Application and API Security module, a part of our Cloud Workload protection capabilities in the Prisma® Cloud platform.

ESG Research Report: Securing the API Attack Surface

Download your copy of Securing the API Attack Surface for insights based on 2023 data that includes

Securing the Future: Asia Pacific Cybersecurity Readiness Survey

Download the full report to gain comprehensive insights into cybersecurity landscape in the Asia Pacific

Ultimate Guide to Modern API Security 2023

Why exactly is it hard to keep track of APIs?

API Security Testing

Legacy appsec scanners don’t protect APIs. Some niche appsec tools may cover a small portion of them, but typically only scan API documentation. This is simply not enough to find and fix API vulnerabilities, early in pre-prod, and throughout the software development lifecycle (SDLC). With Traceable’s API...

Sponsored by Noname Security

API Security in Federal Government

In this ebook with Information Security Media Group, Phillips discusses how to approach the new vulnerabilities and broadened attack surface.

Sponsored by Noname Security

The API Security Disconnect

Read this report to understand how CISOs and senior cybersecurity professionals are approaching the challenge of securing their APIs in an intense and complex threat and operational environment.

API Monitoring: The Basics

With the continued expansion of microservices, the use of APIs is on the rise — but is your enterprise taking the appropriate steps to monitor API performance and guarantee that your systems are performing at their best? Read API Monitoring: The Basics to learn the ins and outs of API monitoring,...

Are All Your Application Secrets Secure Across Your Enterprise

Today’s enterprises are powered by a wide variety of applications, from traditional software solutions hosted in corporate data centers to modern applications running in the cloud. And most applications rely on secrets (passwords, SSH keys, API keys and more) to access the critical systems they need to do to their...

A Guide to Modern API Security

Download this eBook and learn how to master the concepts which are crucial for ensuring that you can balance the benefits of APIs with security challenges.

Sponsored by Noname Security

Shifting Left for DevSecOps Success

According to a recent survey conducted by Noname Security, 41% of organizations experienced an API security incident in the last 12 months and 63% of the incidents involved a data breach or data loss. Filip Verloy, technical evangelist, EMEA at Noname Security, says that “tighter integration of API security...

Sponsored by Noname Security

Introduction to Shift Left API Security Testing

When it comes to API development, it’s not just a matter of testing for security gaps but also when you test your APIs. Only testing prior to deployment can lead to serious vulnerabilities. Discover how developers can build API security into the design with Shift Left API Security Testing, and identify flaws early...

Seven Experts on Protecting OT Environments Against Targeted Cyber Attacks

Digital transformation is well established in the business IT space, but it’s a different story for industrial process control. Because reliability and safety are so critical to industries like oil and gas, these industries are more cautious about adopting the newest technologies. But what are the best ways to...

APAC Threat Landscape: Software Exploits Abound

In Q4 2021, Kroll observed a 356% increase in common vulnerabilities and exposures (CVEs) or zero-day vulnerabilities being exploited for initial access when compared to Q3 2021. With 2021 being a record year for vulnerabilities, these findings underscore the risk to organizations in the wake of...

To Pay or Not to Pay? Proven Steps for Ransomware Readiness

A question that keeps many CISOs awake at night is whether or not to pay in a ransomware attack. In a vacuum, the guidance to withhold payment makes total sense. We don’t want to negotiate with criminals. But when you need to get your business back online, a cost/benefit analysis takes effect, and a company will...