Most companies rely on APIs these days. But if small APIs are easily managed and protected, more complex ones need different approaches. As API complexity grows, security solutions should also be developed to match it. Nowadays, APIs are ubiquitous — there is no doubt about that. As with almost every…

Somebody you know (or you) have a password 123456 or password. Somebody you know (or you) use the same password across different accounts. Somebody you know (or you) have had their passwords exposed in the breached databases. Long story short, passwords are often extremely easy to figure out and therefore…

The content of tokens is often overlooked when designing information security. Learn what data they contain and how to make sure it is properly protected. Information security, sometimes shortened to InfoSec, is an integral part of an organization’s security policy. …

What is Zero Trust and what are the steps to implement a zero-trust architecture to ensure that your system is flexible, secure, and scalable? The concept of a zero trust architecture (ZTA) has been around for a while. However, in practice, zero trust implementations have been moving at a pretty…

What are the challenges associated with the need to comply with local data protection regulations and how to overcome them? Modern businesses need to win customers across multiple regions in order to grow and maximize their market opportunities. This results in application developers building digital services that could be used…

Recommendations on how to manage the security risks and prepare your team when migrating to identity and access management systems. Businesses building digital solutions need to protect their apps against data breaches and meet difficult data privacy regulations. This needs to be done while continuing to deliver a great customer…

Multi-factor Authentication (MFA) is the practice of chaining several authentication methods together when determining whether to grant access to a user. Combining several independent authentication factors makes verifying a user’s identity easier and more precise. Today MFA is considered best practice and helps protect both users and organizations from cybercriminals…

The original post was written by Daniel Lindau and published in the Curity blog. Read it here for a fuller and more detailed overview. It is a very exciting time in the financial sector with open banking expanding across the globe. …

With the web constantly evolving, Single Page Applications have become a prevalent style of applications used on the frontend. It is explained by higher demands on user experience and infrastructure management, which SPAs are great at. However, handling the security of such apps can be challenging. SPA Security Problem In…