API Security in Open Banking: Balancing Innovation with Risk Management

Any technological innovation comes with security risks, and open banking is no exception. Open banking relies on APIs…...

The Hidden Costs of API Breaches: Quantifying the Long-Term Business Impact

API attacks can be costly. Really costly. Obvious financial impacts like legal fines, stolen finances, and incident response budgets can run into the hundreds of millions. However, other hidden costs often compound the issue, especially if you’re not expecting them. This article will explore the...

MAL-2024-1076 Malicious code in open-banking-reference-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75747b956f1d359e555bc99c3edaf59e37fef0f5cd43e5db2318fbf35c25fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in open-banking-reference-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75747b956f1d359e555bc99c3edaf59e37fef0f5cd43e5db2318fbf35c25fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CFPB’s Proposed Data Rules

In October, the Consumer Financial Protection Bureau CFPB proposed a set of rules that if implemented would transform how financial institutions handle personal data about their customers. The rules put control of that data back in the hands of ordinary Americans, while at the same time undermini...

Why Attackers Target the Financial Services Industry

This is Part 1 of a new monthly series from Imperva Threat Research exploring attackers’ motivations to target specific industries. Stay tuned for next months’ exploration of the healthcare industry! Key Takeaways Financial services sites are the most targeted , and it’s important to stay ahead o...

MAL-2022-3831 Malicious code in ing-open-banking-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c57fb80a4aaaf77f630b667bdb332b4a233c094f9eb116fbcad3f20ed566c242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-29464

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps...

PT-2022-2322 · Wso2 · Wso2 Identity Server Analytics +5

Name of the Vulnerable Software and Affected Versions: WSO2 API Manager versions 2.2.0 through 4.0.0 WSO2 Identity Server versions 5.2.0 through 5.11.0 WSO2 Identity Server Analytics versions 5.4.0, 5.4.1, 5.5.0, and 5.6.0 WSO2 Identity Server as Key Manager versions 5.3.0 through 5.11.0 WSO2...

Open Finance — 5 Reasons to Consider Akamai

The increased use of smart devices, improved connectivity, and today’s hyper demanding customers are driving the need for digital transformation in the finance sector. Emerging technologies like open banking are creating new opportunities for both incumbent banks and fintechs...

PSD2 and Open Banking -- The New Way to Work Your Money

The main question behind the Payment Services Directive PSD2 and Open Banking: Is it innovative or just platitudes against competition? Open Banking allows a third party to perform certain acts with your financial institution on your behalf, such as enacting a payment or reviewing your spending...

This Week in Security News: Magecart Attacks and Is Your Smart TV Spying on You?

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Magecart attacks and the security implications of PSD2. Also, read about how your smart TV might be leaking your data to the lik...

How CDN Can Make Your APIs More Powerful

Companies of all sizes and in every industry use APIs for a staggering range of activities. Just a few examples: APIs make it easy to include weather forecasts in apps, recommend driving routes where you are least likely to have an accident, and allow banks to comply with open banking regulations...