Loading story…
API security has become a critical concern for organizations as attack volumes have surged and regulatory frameworks have evolved to explicitly address API-related risks. Recent industry reports highlight a 104% year-over-year increase in API-targeted attacks, underscoring the need for robust protection measures. Compliance standards such as PCI DSS v4.0, NIST SP 800-53, GDPR, SOC 2, and ISO 27001 now include specific requirements for securing APIs, mandating practices like code review, inventory management, and credential rotation for both internal and external APIs involved in sensitive data flows.
The publication of the OWASP Top 10 for Business Logic Abuse further emphasizes the industry's recognition of nuanced API threats that go beyond traditional vulnerabilities. High-profile incidents, such as the exposure of API flaws in Restaurant Brands International's drive-thru operations, demonstrate the real-world impact of business logic abuse, where attackers exploit weaknesses to bypass authentication, eavesdrop on communications, or escalate privileges. Security teams are urged to adopt continuous monitoring and align with both compliance mandates and emerging threat models to safeguard APIs as a core component of their digital infrastructure.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Recent research from Bugcrowd has revealed a dramatic increase in hardware, API, and network vulnerabilities, prompting cybersecurity professionals to reevaluate their defense strategies. The proliferation of Internet of Things (IoT) devices has contributed to an 88% rise in hardware vulnerabilities, as more organizations deploy connected sensors, appliances, and medical equipment. Security researchers have reported that 81% discovered new hardware flaws over the past year, highlighting the scale of the problem. Network vulnerabilities have doubled, and API bugs have increased by 10%, further expanding the attack surface for enterprises. Critical vulnerabilities, particularly those involving broken access control and sensitive data exposure, have seen significant growth, with payouts for these flaws rising by 32%. Broken access control alone has increased by 36%, while sensitive data exposure vulnerabilities have grown by 42%, underscoring persistent foundational security issues. The rapid adoption of AI-assisted software development is accelerating release cycles but also introducing new security gaps, especially in access control and data protection. As applications become more complex and agentic AI systems gain autonomy, managing access control becomes increasingly challenging. IoT security remains a major concern, as many devices are not designed to receive timely vulnerability patches or updates, leaving them exposed to attacks such as distributed denial-of-service (DDoS) and data theft. Attackers are exploiting the remote control capabilities of IoT devices, targeting everything from smart office lighting to advanced medical equipment and agricultural machinery. Efforts to improve IoT security include legislative initiatives and voluntary programs like the US Cyber Trust Mark, which aims to encourage device-makers to adopt better security practices. However, progress on these initiatives has been slow, and it remains uncertain when or if they will have a significant impact. The expanding use of nonhuman identities, such as API keys and machine accounts, further complicates the security landscape, as these digital identities often have broad access and are difficult to monitor. Security leaders are increasingly aware that agentic AI and the growing complexity of interconnected systems are likely to accelerate existing vulnerability trends. As a result, organizations are being urged to rethink their security strategies, focusing on foundational issues like access control, data protection, and the secure management of digital identities. The convergence of these trends signals a need for more robust, adaptive, and proactive security measures to address the evolving threat landscape.
Jun 29, 2026
API vulnerabilities surged in Q3 2025, with researchers identifying 1,602 API-related flaws—a 20% increase from the previous quarter. The most common issues included security misconfigurations, broken authorization, and broken authentication, with a notable rise in AI-API and Model Context Protocol (MCP) vulnerabilities. Attackers increasingly exploited business logic flaws and partner integrations, shifting their focus from traditional code-level weaknesses to more complex attack paths, particularly in AI-powered APIs. Simultaneously, threat actors aggressively targeted software supply chains, especially by compromising npm package maintainers through phishing campaigns. These attacks enabled adversaries to upload malicious packages, impacting thousands of developers. The quarter saw a spike in compromised legitimate packages, highlighted by the S1ngularity campaign and the emergence of the Shai-Hulud npm worm. Attackers used advanced phishing techniques, including adversary-in-the-middle attacks, to bypass traditional multi-factor authentication, underscoring the need for phishing-resistant authentication methods.
Jun 29, 2026
Recent industry reports and expert commentary highlight a surge in targeted cyber threats exploiting weak passwords, API and hardware vulnerabilities, and the exposure of executive data, while also emphasizing the growing importance of advanced training and AI-driven defenses. Attackers are increasingly focusing on less traditional targets such as APIs and hardware, with an 88% rise in hardware vulnerabilities and a 10% increase in API flaws, according to Bugcrowd. Fortune 500 executives face heightened phishing risks due to the abundance of personal data available online, making them prime targets for sophisticated social engineering. Meanwhile, weak password practices continue to enable large-scale data breaches, with nearly 94 million records leaked in a single quarter of 2025. To counter these evolving threats, organizations are investing in cyber range training, which has proven especially effective for early-career professionals, and leveraging AI to enhance SOC operations by detecting subtle anomalies that traditional methods miss.
Jun 29, 2026