F5 Labs Threat Research Swante Bleakley

In the fourth and final episode for 2019, Sara, Ray, and Sander talk about attacks against application programming interfaces (APIs), and how they’ve spiked in the last two years. As with the formjacking attacks discussed in Episode Two, API attacks have become more common because of changes in how organizations design and run applications. The team explains the different kinds of API breaches they’ve seen, what organizations can do to protect their APIs, and make a few predictions about how the security world will adapt to these new risks

The Labs team drills down into the topic of access tier attacks, which were the single most successful attack type in the past year, according to public breach reports. These attacks, which include techniques like phishing, credential stuffing, and brute force attacks, made up a huge proportion of the successful attacks that organizations disclosed. The team explores why these attacks are so successful, what defenders can do to prevent them, and what their ongoing prevalence means for the Internet and its users.

What makes an app, really? Is application security, as we’ve known it, keeping pace with today’s threats? F5 Labs security experts spent a year researching the composition of an app, the increasingly essential role they play in today’s digital world, to better answer these questions. Join threat researchers Sara Boddy and Ray Pompon as they explore these questions and more, sharing their findings from the 2018 Application Protection Report. In this episode, they’ll take a critical look at threats against the App Services Tier—including injection attacks against app services—and how you can find, patch, and block these vulnerabilities.

What makes an app, really? Is application security, as we’ve known it, keeping pace with today’s threats? F5 Labs security experts spent a year researching the composition of an app, the increasingly essential role they play in today’s digital world, to better answer these questions. Join threat researchers Sara Boddy and Ray Pompon as they explore these questions and more, sharing their findings from the 2018 Application Protection Report. In this episode, they’ll take a critical look at threats against the Access Tier. This includes one of the most prevalent app client vulnerabilities, cross-site scripting (XSS). They’ll also explore account access hijacking and how you can put the proper security provisions in place to minimize your risk.

What makes an app, really? Is application security, as we’ve known it, keeping pace with today’s threats? F5 Labs security experts spent a year researching the composition of an app, the increasingly essential role they play in today’s digital world, to better answer these questions. Join threat researchers Sara Boddy and Ray Pompon as they explore these questions and more, sharing their findings from the 2018 Application Protection Report. This episode will take a critical look at DDoS attacks which can strike any component of the app—from the network layer to app infrastructure components such as TLS—and how to get a strong DDoS protection strategy in place.

F5 Labs security experts spent a year researching the increasingly essential role of applications with one question in mind: If organizations don’t understand all the ways attackers can compromise their applications and exploit their data, how can they possibly defend their most critical assets? Join threat researchers Sara Boddy and Ray Pompon in this four-part series where they’ll share their findings from the 2018 Application Protection Report —some alarming, and others not so surprising at all—to help you prioritize what you should focus on to reduce your risk.