McDonald's API-First, Cobre $13M, Cequence Blocks BOLA API Attacks
McDonald's API-First, Cobre $13M, Cequence Blocks BOLA API Attacks
The API Changelog issue 2024.37
This is issue 2024.37 of the API Changelog, a mix of API news, commentary, and opinion. In this issue, you'll get to know the most relevant API-related information from the week of September 2, 2024. Subscribe now, so you never miss an issue of the API Changelog.
News highlight
SmartBear, a leading provider of software quality and visibility solutions, is hosting its annual global customer event series, SmartBear Connect 2024, on Thursday, September 12, 2024, at 10:00 a.m. EDT. The virtual event will feature 20 speakers and over a thousand customers from around the world. The event will cover topics such as GenAI, testing, API excellence, and next-gen observability, as well as real-world customer experiences. Registration is open for in-person events in London, Boston, Bengaluru, and Melbourne.
See additional coverage on StreetInsider.
This issue of the API Changelog was crafted with the help of Flotiq.
Flotiq is an intuitive content management system for designing OpenAPI-compliant APIs, offering unparalleled extensibility to accelerate development with easy-to-use SDKs, comprehensive API documentation, and a user-friendly interface for seamless API and content integration.
Announcements
SignatureAPI is now globally available after a successful beta, offering cost-effective electronic signature integration. It features user-friendly signing experiences, document template automation, and support for various languages and locales.
Sonos has improved third-party integration with a new search API, enabling multi-service content searches via partner touchscreens. These updates enhance home automation experiences by syncing Sonos music with lights and shades, creating immersive, lifestyle-compatible environments. See additional coverage on residential tech today.
Amazon has enhanced its Ads API, allowing users to modify Sponsored Brands campaign landing pages directly. The update is globally available and offers more dynamic ad management without altering campaign structures.
Amazon Redshift introduces session reuse for its Data API, streamlining query processes by retaining session context and minimizing setup latency. The feature is now widely available, with setup details in the Amazon Redshift database developers guide.
Assurecare MedCompass now meets CMS' interoperability and prior authorization rule, easing payors' compliance with new regulations. The platform's functionality supports timely prior authorization via FHIR API, aligning with CMS mandates to reduce administrative burden.
First Connect Insurance Services partners with Root Insurance to provide API-powered auto insurance quoting and binding for agents. The platform plans expansion into 25 more states by October while easing policy selection and device flexibility for agents.
McDonald's China's API-first strategy boosts operational efficiency, backed by rigorous standards and AI-driven governance, promoting digital innovation and interconnectivity. Their API framework, foundational to digital agility and growth, secured the China Technology Excellence Award in the API - Food & Beverage category.
Aleph Zero, a blockchain ecosystem, joined CAMARA Foundation to collaborate on standardized blockchain APIs in telecommunications. Key focus includes developing the Blockchain Public Address API for pairing phone numbers with blockchain addresses. See additional coverage on Brave NewCoin.
Funding and M&A
Colombian startup Cobre has secured a $13M funding round to revolutionize corporate payment processes. The investment, led by QED Investors and Atlantico Partners, will be used to expand Cobre's enterprise software and self-built payment rails, facilitating instant payments and real-time data sharing across Colombian banks. Cobre has experienced significant business growth.
Axway's acquisition of Sopra Banking Software aims to enhance its financial technology offerings. Patrick Donovan will lead as CEO, with Eric Bierry as Deputy CEO, targeting strategic growth by late 2024.
AI
MuleSoft, a Salesforce company, collaborated with Amazon to develop a connector that integrates their Anypoint Platform with Amazon's generative AI services. This integration allows businesses to utilize AI for automating processes and enhancing customer experiences. The MuleSoft Bedrock Connector for Amazon enables seamless system integration, leveraging generative AI for innovative applications, better decision-making, and operational efficiency.
The API for GPT-4o-2024-08-06, Openai advanced AI model, now features JSON Structured Outputs to boost developer efficiency and reduce costs. It's globally available through Azure, with innovative capabilities ensuring reliable, real-time text generation for diverse applications.
Stability AI is scaling up its partnership with AWS, bringing three advanced text-to-image AI models to Amazon Bedrock. The company targets varied use cases and aims for increased revenue through new model accessibilities and a membership model.
DataStax has enhanced GenAI app development with features for data preparation and performance, including integration with Unstructured.io and Glean tools. It also introduced the DataStax Langflow API for easier app building and deployment. See additional coverage on businesswire.
Jitterbit announces Harmony, an AI-powered, low-code platform for business process automation and app development. Harmony enhances efficiency and innovation across integration, orchestration, and automation for global organizations. See additional coverage on ITBrief.
Fintech and Crypto
Coinhitex has solidified its status in the crypto space by improving its open-source API and expanding multi-blockchain compatibility. These enhancements aim to deliver a more robust and versatile trading experience for users.
iPiD, a provider of payee validation services, has partnered with Infinia to expand its Latin American presence. In return, Infinia will incorporate iPiD's API to improve their validation services and enhance payment security.
Standard Chartered teams up with NeSL to launch India's innovative eBG, with Hitachi Systems India as their first client. The bank's API-driven solutions are improving operational efficiency, real-time visibility, and setting a global digital precedent in trade finance. See additional coverage on Analytics Insight, NDTV Profit and SME Street.
PortX has launched its Fintech Hub on Fiserv's AppMarket to streamline fintech integrations and improve financial institutions' access to innovative solutions. This collaboration aims to enhance customer experiences by offering efficient, cost-effective connectivity through pre-built API connectors.
Alpaca introduces IRA accounts via Broker API, providing tax benefits and fostering consistent AUM growth and user retention. The platform simplifies the complex tax reporting for IRAs, offering features like beneficiary designation and efficient compliance management.
Security
Tesla has intensified efforts to prevent leaks by watermarking VINs on release notes and cutting API access for early software updates. These updates are issued to internal testers and Wave 1 employees prior to broader distribution, to ensure extensive bug testing across diverse hardware configurations.
Cloudflare reports that API abuse in India is on the rise, necessitating advanced security measures such as the AI-enhanced AppSentinels Full Lifecycle API Security Platform. As over 90% of web applications will expose more through APIs than user interfaces by 2025, Gartner emphasizes the urgency of safeguarding API endpoints. See additional coverage on CXOtoday.com.
Cequence successfully defended major telecoms, like Cequence Security, from six sophisticated BOLA API attacks by blocking 22 million malicious requests. They used advanced detection and real-time monitoring to safeguard sensitive telecom API traffic against IMEI number manipulation and proxy misuse.
Traceable AI has teamed up with AWS to improve API security platform access and integration on AWS, addressing API attack threats in cloud-native setups. The partnership empowers AWS users to buy and scale Traceable's API security seamlessly via AWS Marketplace, improving real-time threat detection and API protection.