Aggregator

This post first appeared on blog.netwrix.com and was written by Sean Bergman.
Introduction to Database Security In today’s digitized world, the heart of any organization’s IT infrastructure is arguably its database systems. Databases host a wide range of information, from sensitive customer data to proprietary business intelligence — which makes them a top target for cyberattacks. As a database administrator (DBA), you need a solid grasp of … Continued

This post first appeared on blog.netwrix.com and was written by Christopher Nieves.
SharePoint makes collaboration and sharing exceedingly easy — which can put sensitive and regulated content at risk. Accordingly, administrators need to put guardrails in place that facilitate appropriate sharing and prevent data leakage. Download eBook: Best Practices for SharePoint and SharePoint Online In SharePoint Online, the primary way for a user to grant access to resources is … Continued

​Halliburton, one of the world's largest providers of services to the energy industry, has confirmed a cyberattack that forced it to shut down some of its systems earlier this week. [...]

High threat level vulnerability CVE-2024-38178 discovered on Microsoft Edge browser : OFFICIAL CVE-2024-38178 PATCHING INFORMATION : A recent discovery has unveiled CVE-2024-38178, a critical vulnerability within Microsoft Windows, which impacts Internet Explorer mode in Microsoft Edge. With a CVSS v3 score of 7.5, CVE-2024-38178 poses a high threat level by enabling attackers to execute code...

The post CVE-2024-38178 Vulnerability within Microsoft Edge appeared first on TrueFort.

The post CVE-2024-38178 Vulnerability within Microsoft Edge appeared first on Security Boulevard.

High threat level vulnerability CVE-2024-38178 discovered on Microsoft Edge browser: O

2024 KCTF 第四题《神秘信号》设计思路及解析 by ourren

更多最新文章，请访问SecWiki

### This module requires Metasploit: https://metasploit.com/download# Current source: https://gith

### This module requires Metasploit: https://metasploit.com/download# Current source: https://gith

-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512Advisory ID: SYSS-2024-042Product:

申报截止时间为2024年9月22日24:00（北京时间）

The Unified Extensible Firmware Interface (UEFI) is a specification that defines the architectur

Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader," Google-owned Mandiant said. "This PowerShell-based downloader is being tracked as PEAKLIGHT." Some of

因致命蚊传病毒美国马萨诸塞州的 Oxford 镇督促居民晚上呆在室内。这种通过蚊子传播的病毒会导致东部马脑炎(Eastern equine encephalitis 或 EEE)，致死率高达 30% 到 50%，感染者通常是 15 岁以下儿童和老年人，即便幸免也会饱受残疾之苦，部分幸存者会因为并发症在几年内死亡。这种病毒至今没有治疗方法。马萨诸塞州在 8 月 16 日宣布了首例感染病例，宣布 Douglas、Oxford、Sutton 和 Webster 四镇处于重大风险等级。该病人就是 Oxford 镇的居民。镇卫生委员会建议居民用驱虫剂、穿防护服，在家中防蚊。宵禁是非强制性的，只是一项建议。

The adoption of Cloud Native Application Protection Platforms (CNAPPs) has surged, reflecting a growing recognition of the need for comprehensive security across cloud environments. According to industry reports, the global CNAPP market is projected to grow at a CAGR of over 25% from 2023 to 2028 – and 40% of enterprises already have one. This […]

The post CNAPP found identity problems. How are you fixing them? appeared first on Security Boulevard.

This analysis highlights the 2024 Democratic National Convention’s impact on Internet traffic and security, with spikes in interest for sites related to Kamala Harris and the Democrats, as well as news sites, plus pre-convention attacks on political organizations.

美国的两大政党是民主党和共和党，其中民主党倾向于支持更自由的政策，而共和党支持更保守的政策。近年来随着政治极化，持不同政治立场的人彼此之间互相厌恶的情况日益普遍。夫妻之间持不同政治立场的情况也日益罕见的。根据发表在《Journal of Personality and Social Psychology》一项研究，此类跨党派夫妇仅占 8%。研究还发现，相比 50 年前，政治立场迥异的两个人结婚的可能性更小了。跨党派婚姻也更可能以离婚收场。政治立场相似的两个人结婚被认为可能会增加回音室效应，加剧政治极化。研究显示，逾八成的 民主党人和共和党人有支持同一政党的伴侣；如果两个人政治立场不同，那么另一方更可能是无党派的；民主党人伴侣支持无党派的可能性几乎是共和党人伴侣的两倍。

In today’s hyper-connected digital landscape, APIs are the lifeblood of innovation, powering everything from customer experiences to internal operations. However, with this growing reliance on APIs comes a dark side—zombie and shadow APIs. These hidden, forgotten, or undocumented endpoints present significant security risks that traditional approaches simply can’t address. In this post, we’ll explore why these APIs are so dangerous and why Salt Security is the only solution capable of securing your entire API ecosystem.

What Are Zombie and Shadow APIs?

Before diving into the risks, it’s essential to understand what we mean by zombie and shadow APIs:

• Zombie APIs are endpoints that were once used but are now outdated, deprecated, or forgotten. These can linger in your environment long after they’re needed, exposing potential vulnerabilities.
• Shadow APIs are those created without the knowledge or approval of security teams. They often emerge when development teams build new endpoints without properly documenting or integrating them into the formal API management processes.

Both types of APIs are typically overlooked by traditional security tools, yet they are ripe targets for attackers. Unmonitored and unmanaged, these endpoints can provide easy access points for data breaches, unauthorized access, and other malicious activities.

The Risks of Zombie and Shadow APIs

The hidden nature of these APIs makes them particularly dangerous. Here are a few key reasons why:

1. Lack of Visibility: Without complete visibility into your API inventory, it’s impossible to secure what you don’t know exists. Zombie and shadow APIs are often undocumented, making it easy for them to fall under the radar.
2. Inconsistent Security Posture: These APIs might not adhere to current security standards, leaving them vulnerable to attacks like SQL injection, authentication bypasses, or data exfiltration.
3. Compliance and Data Privacy Risks: Undocumented APIs can inadvertently expose sensitive data, leading to compliance violations and hefty fines under regulations like GDPR and CCPA.
4. Operational Inefficiencies: Managing zombie and shadow APIs drains resources and introduces unnecessary complexity. Developers and security teams waste valuable time tracking down and mitigating issues with APIs that shouldn’t even exist.

Why Traditional Tools Fail to Address These Issues

Legacy security tools and API management platforms are ill-equipped to handle the dynamic and often chaotic nature of modern API environments. They rely on manual processes, static documentation, or simple API gateways that can’t adapt to the fluid development cycles and sprawling microservices architectures seen today. This leaves a critical gap in security that attackers are all too eager to exploit.

How Salt Security Solves the Zombie and Shadow API Problem

Salt Security’s API Protection Platform stands alone in its ability to discover, monitor, and secure every API in your environment—no matter how obscure or hidden it may be. Here’s how:

1. Comprehensive API Discovery: Salt Security continuously and automatically discovers all APIs in your environment, including zombie and shadow APIs. Our platform dynamically maps your entire API landscape, providing the full visibility you need to identify risks and eliminate blind spots.
2. API Posture Governance: Once discovered, Salt Security allows you to apply posture governance rules to bring them into compliance with your organization's regulatory or industry-specific guidelines. This helps to dramatically lower the risk profile that these shadow and zombie APIs presented before.
3. Advanced Behavioral Analysis: Using machine learning and AI, Salt Security analyzes the behavior of every API, identifying anomalies, outdated endpoints, and undocumented activity that could indicate a zombie or shadow API. This proactive approach lets you detect issues before they become full-blown security incidents.
4. Real-time Threat Detection and Response: Our platform doesn’t just discover hidden APIs—it actively protects them. Salt Security’s real-time threat detection capabilities ensure that even the most obscure APIs are monitored and secured against attacks. Deep insights into each API’s behavior allow us to quickly identify and mitigate threats specific to zombie and shadow APIs.
5. Extend API Security Left: Salt Security integrates seamlessly into your development pipeline, ensuring that zombie and shadow APIs are addressed at the earliest stages of development. By embedding governance and security into the CI/CD process, we help prevent the creation of risky, undocumented APIs from the start.

Why Salt Security Is the Only True Solution

While other solutions may claim to offer API protection, none provide the end-to-end capabilities needed to fully secure zombie and shadow APIs. Salt Security offers the most comprehensive AI-infused platform for API security, combining deep discovery, continuous monitoring, governance, and proactive threat detection. Our solution not only finds hidden APIs—it safeguards them, ensuring your organization’s API landscape remains resilient, compliant, and secure.

Conclusion

Zombie and shadow APIs represent a hidden yet significant threat to your organization’s security posture. With traditional tools falling short, it’s time to rethink your API security strategy. Salt Security’s unique capabilities make it the only solution capable of addressing the full spectrum of API threats—including those you can’t see.

By choosing Salt Security, you can rest assured that your APIs—documented or not—are fully protected, enabling your business to innovate without compromise.

If you want to learn more about Salt and how we can help you on your API Security journey through discovery, posture management, and run-time threat protection, please contact us, schedule a demo, or check out our website.

The post The Hidden Dangers of Zombie and Shadow APIs—and Why Only Salt Security Can Tackle Them appeared first on Security Boulevard.

全球最大的油田服务公司疑遭网络攻击，丰田再发数据泄露事件……