My Journey With Traceable Begins

Cloud-native, microservices, APIs, and AI are driving change. Cybersecurity must evolve—transition to a company that understands this vision.

Another Milestone! Traceable Wins the 2023 Cybersecurity Breakthrough Award

Explore Traceable's award-winning API security, recognized by the 2023 CyberSecurity Breakthrough Award, and how ZTAA provides future-proof protection.

President Biden's Executive Order on Artificial Intelligence: A Cybersecurity Perspective

Discover how APIs support President Biden's AI Executive Order, enhancing interoperability, scalability, and security for a trustworthy AI ecosystem.

How Traceable Aligns to Forrester's Eight Components of API Security

Discover how Traceable aligns with Forrester's API security report, tackling challenges and offering solutions for robust protection and governance.

Recent Posts

Decoding ownCloud’s Vulnerabilities: The Hidden Flaws of API Trust

Help, I'm Being Attacked: Why WAFs & Gateways Won't Stop the Next API Attack

Let’s Face It - Criminals are bypassing selfie verification in Know Your Customer processes

API Security: The Risk Threatening Australian Businesses

Why "Check-the-Box” Solutions Are Insufficient for API Security

Securing Third Party APIs is Critical for Modern Business

API Security

The Authorization Maze

This article delves deep into the complexities of authorization in API security, exploring why implementing robust access controls is far more challenging than many engineers realize. Through real-world examples from companies like Airbnb and Uber, the author breaks down different types of authorization vulnerabilities (BOLA, BOPLA, BFLA) and explains the nuanced challenges of creating dynamic, context-aware access policies.

Decoding ownCloud’s Vulnerabilities: The Hidden Flaws of API Trust

An in-depth analysis of three critical vulnerabilities discovered in ownCloud's API infrastructure, exposing risks in authentication, OAuth implementation, and file access controls. These security flaws highlight the importance of treating third-party APIs with enhanced scrutiny and implementing proper validation measures. Learn how these vulnerabilities were patched and what steps organizations should take to protect their systems.

Let’s Face It - Criminals are bypassing selfie verification in Know Your Customer processes

Explore how criminals are exploiting selfie verification in Know Your Customer (KYC) processes for neobanks. Learn about the risks, current bypass techniques, and potential solutions for more secure digital identity verification in fintech.

API Security: The Risk Threatening Australian Businesses

Explore API security ownership in modern Australian enterprises, key stakeholders, and how regulations like APRA and SOCI shape security practices and governance.

Why "Check-the-Box” Solutions Are Insufficient for API Security

Why “Check-the-Box” Solutions Are Insufficient for API Security

Traceable ASPEN

Angular-ing for AuthZ, Problematic anti-patterns in Single Sign On Systems

A critical SSO vulnerability in a Fortune 500 app risks millions of records. Learn about SSO security risks, fixes, and protecting APIs from similar attacks.

Understanding CVE-2024-3400 in PAN-OS GlobalProtect

CVE-2024-3400 targets Palo Alto GlobalProtect, allowing attackers to write arbitrary files and execute system commands. Learn best practices for preventing exploits.

How API Flaws Allowed Students to do their Laundry for Free

Smart appliances offer convenience, but security flaws in CSC ServiceWorks' laundry system allowed free cycles, raising concerns over device safety.

Service Now RCE - The Three Keys to ServiceNow's Data Vault

Discover critical ServiceNow vulnerabilities (CVE-2024-4879, 5178, 5217) enabling remote code execution. Learn their impact & how Traceable secures your APIs.

How 1 Exposed Honeywell API Gave us Control Over an Internal Engineering System

APIs are crucial for web apps but pose security risks. Traceable uncovered a critical flaw in Honeywell's BEDQ system, highlighting the need for strong API security.

Navigating the Road to Automotive Security

Traceable ASPEN's latest research highlights urgent automotive security needs, focusing on recent API vulnerabilities, real-time tracking, and data breaches.

Product Updates

December Software Release

December was an extremely busy month for Traceable as we worked with customers to protect their environments from the Log4Shell vulnerability.

Traceable Defense AI M8 Released

Easier deployment process, extended agent support, extended API Intelligence, easier to find problems, protection additions, improved UX around threat hunting, ability to isolate per environment

Manage your external attack surface with new Traceable Sonar

Traceable Sonar efficiently identifies and catalogs these assets, granting security teams a panoramic view of their external attack surface. But it doesn't stop at discovery. Sonar delves deep into these assets, pinpointing vulnerabilities an attacker might exploit. By mirroring the probing techniques attackers use, Traceable Sonar equips organizations with critical insights into potential security loopholes.

Traceable API Security Platform Updates - July 2023

The Traceable AI team has been busy adding new capabilities and enhancing existing ones to better meet your API Security needs. Here is a sampling of some of the additions in July 2023.

Introducing Traceable's Digital Fraud Prevention: A New Frontier in API Security

At Traceable, we continually push the boundaries of innovation. Today, we're thrilled to announce the latest development in our mission to provide robust security to businesses worldwide - the launch of our Digital Fraud Prevention capabilities.

OWASP API Security Top 10 List 2023 Refresh