Imperva Application Security Integrates API Detection and Response, Setting A New Standard in API Security
Article content
First unified, single-pane-of-glass platform to deliver real-time detection and mitigation of API threats, including Broken Object Level Authorization (BOLA) and other advanced business logic threats
Offers flexible deployment across cloud and on-premise environments, with a privacy-forward design to secure APIs at scale.
Article content
MEUDON, France — Thales today announced new detection and response capabilities in the Imperva Application Security platform to protect against business logic attacks, such as Broken Object Level Authorization (BOLA) – the leading threat in the OWASP API Security Top 10. By integrating real-time detection with automated mitigation of risky APIs, BOLA attacks, unauthenticated APIs, and deprecated APIs, Imperva Application Security platform delivers comprehensive protection against unauthorized data exposure and other complex business logic vulnerabilities across cloud and on-premises environments. APIs have become the backbone of modern applications, enabling businesses to seamlessly connect services, optimize operations, and deliver personalized experiences at scale. According to Imperva Threat Research, APIs accounted for 71% of all web traffic. More recently, the team observed a sharp rise in API-directed attacks, with 44% of advanced bot traffic targeting APIs, compared to just 10% targeting web applications. This shift underscores how attackers are increasingly exploiting API endpoints that manage sensitive and high-value data.
Article content
Why BOLA is a Critical Business Risk
Article content
BOLA occurs when APIs fail to properly verify whether users are authorized to access specific data objects. This allows attackers to manipulate requests and gain unauthorized access to sensitive information. As the leading OWASP Top 10 API threat, BOLA exposes businesses to significant risks, including data breaches, compliance failures, and loss of customer trust.
Article content
'API security is no longer optional
Article content
–
Article content
it's fundamental to maintaining business continuity and trust,' said Tim Chang, Global Vice President and General Manager of Application Security at Thales. 'Imperva Application Security bridges the gap by delivering a fully unified platform that identifies business logic threats and actively blocks malicious sessions, setting a new benchmark for API protection.'
Article content
Empowering Enterprises with a Unified, Flexible, and Privacy-First Solution
Article content
Imperva Application Security integrates advanced threat detection engines with automated inline responses and flexible deployment options, enabling security teams to detect and respond to API attacks like BOLA without slowing development or disrupting the user experience. For customers who want to protect their API infrastructure, Imperva Application Security delivers the following benefits:
Article content
Unified Platform Architecture: Manage API discovery, risk assessment, detection, and mitigation in a single console, eliminating tool sprawl and operational friction across cloud and on-premises environments.
Real-Time BOLA Detection: Hybrid behavioral and rule-based engines analyze API request patterns, scoring anomalies, and flagging endpoints for immediate action.
Automated Response and Remediation: Integration with Imperva Cloud WAF and WAF Gateway enables a variety of response actions, including inline mitigation actions such as automatically blocking malicious API traffic in real-time. Integration with security automation tools ensures rapid incident orchestration.
Article content
Advancing the Imperva Security Anywhere Vision
The integration of API detection and response into Imperva Application Security is foundational to the Imperva Security Anywhere vision, which provides scalable, end-to-end protection for applications and APIs across any environment. This unified solution provides enterprises with a comprehensive view of automated threats targeting APIs and the necessary tools to protect those APIs.
Article content
Detection and response to deprecated APIs, unauthenticated APIs, and BOLA attacks are now available as part of Imperva Application Security.
Article content
About Thales
Article content
Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion.
Article content
The Group invests more than €4 billion per year in Research & Development in key areas, particularly for critical environments, such as Artificial Intelligence, cybersecurity, quantum and cloud technologies.
Article content
Thales has more than 83,000 employees in 68 countries. In 2024, the Group generated sales of €20.6 billion.
Article content
Article content
Article content
Article content
Article content
Contacts
Article content
Thales, Media Relations
Article content
Article content
Article content
Marion Bonnet
Article content
Article content
Article content
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Globe and Mail
an hour ago
- Globe and Mail
U.S., China negotiators to resume talks in effort to extend tariff truce
Senior U.S. and Chinese negotiators meet in Stockholm on Monday to tackle longstanding economic disputes at the centre of the countries' trade war, aiming to extend a truce keeping sharply higher tariffs at bay. China is facing an August 12 deadline to reach a durable tariff agreement with President Donald Trump's administration, after Beijing and Washington reached a preliminary deal in June to end weeks of escalating tit-for-tat tariffs. Without an agreement, global supply chains could face renewed turmoil from duties exceeding 100 per cent. The Stockholm talks, led by U.S. Treasury Secretary Scott Bessent and Chinese Vice Premier He Lifeng, take place a day after European Commission President Ursula von der Leyen meets Trump at his golf course in Scotland to try to clinch a deal that would likely see a 15 per cent baseline tariff on most EU goods. Trade analysts on both sides of the Pacific say the discussions in the Swedish capital are unlikely to produce any breakthroughs but could prevent further escalation and help create conditions for Trump and Chinese President Xi Jinping to meet later this year. Previous U.S.-China trade talks in Geneva and London in May and June focused on bringing U.S. and Chinese retaliatory tariffs down from triple-digit levels and restoring the flow of rare earth minerals halted by China and Nvidia H20 AI chips and other goods halted by the United States. U.S. to discuss tariff deadline extension with China as Trump, Philippines reach deal So far, the talks have not delved into broader economic issues. They include U.S. complaints that China's state-led, export-driven model is flooding world markets with cheap goods, and Beijing's complaints that U.S. national security export controls on tech goods seek to stunt Chinese growth. 'Stockholm will be the first meaningful round of U.S.-China trade talks,' said Bo Zhengyuan, Shanghai-based partner at China consultancy firm Plenum. Trump has been successful in pressuring some other trading partners, including Japan, Vietnam and the Philippines, into deals accepting higher U.S. tariffs of 15 per cent to 20 per cent. He said there was a 50-50 chance that the U.S. and the 27-member European Union could also reach a framework trade pact, adding that Brussels wanted to 'make a deal very badly'. Two of Trump's top trade officials, Commerce Secretary Howard Lutnick and U.S. Trade Representative Jamieson Greer, will attend the Scotland talks and then travel to Stockholm. Analysts say the U.S.-China negotiations are far more complex and will require more time. China's grip on the global market for rare earth minerals and magnets, used in everything from military hardware to car windshield wiper motors, has proved to be an effective leverage point on U.S. industries. In the background of the talks is speculation about a possible meeting between Trump and Xi in late October. Trump has said he will decide soon whether to visit China in a landmark trip to address trade and security tensions. A new flare-up of tariffs and export controls would likely derail any plans for a meeting with Xi. 'The Stockholm meeting is an opportunity to start laying the groundwork for a Trump visit to China,' said Wendy Cutler, vice president at the Asia Society Policy Institute. Bessent has already said he wants to work out an extension of the August 12 deadline to prevent tariffs snapping back to 145 per cent on the U.S. side and 125 per cent on the Chinese side. Still, China will likely request a reduction of multi-layered U.S. tariffs totaling 55 per cent on most goods and further easing of U.S. high-tech export controls, analysts said. Beijing has argued that such purchases would help reduce the U.S. trade deficit with China, which reached US$295.5-billion in 2024. China is currently facing a 20 per cent tariff related to the U.S. fentanyl crisis, a 10 per cent reciprocal tariff, and 25 per cent duties on most industrial goods imposed during Trump's first term. Bessent has also said he would discuss with He the need for China to rebalance its economy away from exports toward domestic consumer demand. The shift would require China to put an end to a protracted property crisis and boost social safety nets to encourage household spending. Michael Froman, a former U.S. trade representative during Barack Obama's administration, said such a shift has been a goal of U.S. policymakers for two decades. 'Can we effectively use tariffs to get China to fundamentally change their economic strategy? That remains to be seen,' said Froman, now president of the Council on Foreign Relations think-tank.
Globe and Mail
6 hours ago
- Globe and Mail
Is QuantumScape Stock a Buy Now?
Key Points QuantumScape's solid-state lithium-metal battery technology aims to achieve higher energy density, faster charging, and improved safety compared to traditional lithium-ion batteries. The company has partnered with PowerCo, Volkswagen Group's battery manufacturing arm, to produce its technology and support a capital-light business model. Analysts predict that meaningful revenue won't materialize until 2027, with a surge forecast for 2028. 10 stocks we like better than QuantumScape › QuantumScape (NYSE: QS) is leading the charge to revolutionize energy storage with its innovative solid-state lithium-metal battery technology for electric vehicles and other applications. Its cutting-edge battery technology promises higher energy density and faster charging times, while also significantly improving safety compared to traditional lithium-ion batteries. The company has made headlines recently as its battery technology progresses, and the stock has surged 265% from its 52-week low. Here's what investors need to know about QuantumScape's investment prospects and what to expect from the company over the next several years. QuantumScape's battery technology ambitions Last year, QuantumScape partnered with PowerCo, the battery manufacturing arm of the Volkswagen Group. Volkswagen has been a significant investor in QuantumScape since 2012, committing around $380 million, and is the company's largest shareholder. QuantumScape's collaboration with PowerCo looks to advance its QSE-5 technology platform, with the goal of scaling up production at PowerCo's facilities. PowerCo is the "anchor customer" in QuantumScape's expanding technology ecosystem, as the company aims to develop a capital-light licensing model and expand its partnerships with customers worldwide. Instead of incurring heavy manufacturing investments, QuantumScape would license its technology to these partners, reducing its exposure to manufacturing risks and capital demands. QuantumScape is focused on broadening its range of potential licensing agreements with other automotive manufacturers. It also aims to strengthen its relationships with technology partners and key players across the battery value chain. This recent news sent the stock soaring One of QuantumScape's primary goals coming into 2025 was to bring the Cobra separator process into baseline production. Cobra represents a "step-change innovation in ceramics processing" designed to enable a significant improvement in separator productivity. This new process offers a 25 times improvement in heat treatment speed and requires only a fraction of the physical space per film start (compared to its prior-generation Raptor process). In June, the company announced that its Cobra separator process had reached baseline production, a key step toward commercializing its batteries. The successful baselining of Cobra is crucial for enabling higher-volume B1 sample production of their QSE-5 cells, which will be used in a launch program designed to showcase them, with field testing scheduled to commence in 2026. Since the announcement, the stock has surged 190%. Be mindful of the timeline and its finances One thing investors should be aware of regarding QuantumScape is that it is a company in its early growth stage. The company has not generated any revenue to date and continues to incur losses as it spends heavily on research and development. QuantumScape posted an operating loss of $123.6 million in the first quarter and expects to incur significant expenses and ongoing losses into the future. Capital expenditures in the first quarter of 2025 were $5.8 million, primarily supporting equipment and facilities for higher-volume QSE-5 B1 sample production using the Cobra separator process. The company's full-year capital expenditure guidance for 2025 is between $45 million and $75 million. QuantumScape reported $860.3 million in cash and equivalents at the end of the first quarter and anticipates this cash runway is enough to extend into 2028. This runway has expanded since it announced its licensing agreement with PowerCo, which is expected to lower costs and capital requirements compared to previous joint venture arrangements. Is QuantumScape a buy today? I'm excited about the potential of QuantumScape's groundbreaking battery technology, which has the potential to transform energy storage in the future. However, the company is still in the early stages of development and testing, and will continue to incur losses as it brings its vision to life. Analysts have noted that we should not expect meaningful revenue from QuantumScape until 2027, with projections of $51.6 million that year, followed by a significant leap to $265 million in 2028. Until then, we're looking at a story-driven stock that will attract attention but may not offer as much upside from here, especially given its recent surge. Should you invest $1,000 in QuantumScape right now? Before you buy stock in QuantumScape, consider this: The Motley Fool Stock Advisor analyst team just identified what they believe are the 10 best stocks for investors to buy now… and QuantumScape wasn't one of them. The 10 stocks that made the cut could produce monster returns in the coming years. Consider when Netflix made this list on December 17, 2004... if you invested $1,000 at the time of our recommendation, you'd have $636,628!* Or when Nvidia made this list on April 15, 2005... if you invested $1,000 at the time of our recommendation, you'd have $1,063,471!* Now, it's worth noting Stock Advisor's total average return is 1,041% — a market-crushing outperformance compared to 183% for the S&P 500. Don't miss out on the latest top 10 list, available when you join Stock Advisor. See the 10 stocks » *Stock Advisor returns as of July 21, 2025
Globe and Mail
a day ago
- Globe and Mail
Bayer AG's Exploratory Study on Sepsis and DIC: A Potential Game-Changer?
Bayer AG ((BAYRY)), Bayer Ag (UK) ((GB:0P6S)) announced an update on their ongoing clinical study. Elevate Your Investing Strategy: Take advantage of TipRanks Premium at 50% off! Unlock powerful investing tools, advanced data, and expert analyst insights to help you invest with confidence. Bayer AG is conducting an exploratory study titled 'Exploratory Study to Investigate the Association Between the Onset of Disseminated Intravascular Coagulation (DIC) and Disease Progression With Different Biomarker Candidates as Well as Standard Clinical and Demographic Parameters in Adult Patients With Sepsis.' The study aims to understand how sepsis progresses to DIC, a severe blood disorder, by identifying biomarkers in patients admitted to intensive care units across Europe. This research is significant due to the limited treatment options for DIC, especially in sepsis patients. The study involves no investigational treatments; instead, participants receive standard medical care for sepsis. The focus is on collecting blood samples and clinical data to identify biomarkers indicative of DIC development. Designed as an interventional study with a single-group model, this research does not involve masking and primarily seeks to gather observational data. The study's primary purpose is to explore the progression of sepsis to DIC. The study began on January 29, 2025, with primary completion expected within 56 days for each participant. The latest update was submitted on July 22, 2025, indicating ongoing recruitment and data collection. This study could impact Bayer's stock performance by potentially enhancing its reputation in the medical research field, especially if the findings lead to improved understanding and treatment of sepsis-related DIC. Investors may view this as a positive development, although the absence of new drug interventions limits immediate commercial implications. The study is ongoing, with further details available on the ClinicalTrials portal.
