Grip

Salt

State Of API Security (2025) - Highlights the persistent challenges and evolving landscape of API security, driven by rapid digital transformation and cloud migration. Despite widespread API adoption and a nearly universal encounter with security issues, many organizations struggle with accurate inventory, real-time monitoring, and robust posture governance, alongside emerging GenAI-driven risks

Armis

Early Warning Insights for Software Supply Chain Attacks (2025) - Investigates the rising threat of software supply chain attacks driven by artificial intelligence and the practice of rapid, unverified code deployment. Research indicates that as many as 40 percent of code suggestions generated by large language models contain exploitable security vulnerabilities, while specific slopsquatting incidents have already resulted in over 1,065 malicious package downloads. By shifting focus toward indicators of action rather than static artifacts, organizations can better mitigate the risks posed by automated dependency resolution and the integration of fragile, AI-generated code into critical infrastructure

Akamai

State of Apps and API Security (2025) - Documents a year of material escalation in cyber risks, specifically highlighting how Artificial Intelligence is supercharging both offensive and defensive strategies. Akamai observed over 311 billion web application and API attacks in 2024, a 33% increase from the previous year

Sonatype

copyright: — Reports known vulnerabilities in common dependencies and recommends updated packages to minimize breaking changes