CAMARA Meta-Release Fall24, Traefik API Governance, Azure Critical Flaw
The API Changelog issue 2024.39
This is issue 2024.39 of the API Changelog, a mix of API news, commentary, and opinion. In this issue, you'll get to know the most relevant API-related information from the week of September 16, 2024. Subscribe now, so you never miss an issue of the API Changelog.
News highlight
Wells Fargo has launched specialized APIs for Commercial Banking clients, enhancing real-time data access across various sectors. These APIs enable seamless system integration, reducing manual processes and facilitating instant business insights and transactions.
These APIs offer faster order processing, instant credit checks, and real-time inventory data for precise forecasting and supply chain control. They also streamline money management and provide instant transaction reconciliation. Expanding WFC's APIs portfolio will help solidify customer loyalty and attract new clients seeking advanced digital solutions, potentially leading to increased transaction volumes and higher revenue streams. However, this innovation could lead to rapid expense increases and adversely affect the company's financials.
See additional coverage on StreetInsider, Fintech Finance News, Newsroom, Benzinga, and Microsoft Start.
This issue of the API Changelog was crafted with the help of Flotiq.
Flotiq is an intuitive content management system for designing OpenAPI-compliant APIs, offering unparalleled extensibility to accelerate development with easy-to-use SDKs, comprehensive API documentation, and a user-friendly interface for seamless API and content integration.
Announcements
Vonage has launched RCS messaging, offering enhanced, secure interactions between businesses and customers via the Vonage Messages API. Vonage RCS is now available in over ten countries, facilitating richer customer communication with advanced features. See additional coverage on destination CRM.
Dutchie, the platform facilitating cannabis sales, has launched Metrc Connect, a new traceability integration for point-of-sale systems. The product results from a collaborative effort with Metrc to improve industry traceability standards.
CAMARA has launched its Meta-Release Fall24, offering 25 APIs across 13 sub-projects, with biannual updates committed. The initiative, under the Linux Foundation's wing, has grown to over 1,100 contributors from 396 organizations. See additional coverage on StreetInsider, TelecomTV, The Fast Mode, The Mobile Network, and telecoms.
The UIS has launched a new Data Browser, improving access to education, science, and culture data with advanced visualization and sharing options. They offer API training sessions for deeper technical integration and analysis.
Kong has launched a Premium Technology Partner Program to deepen engagements and foster innovation in its cloud and developer framework. The program promises high-quality integrations with initial partners, including Traceable AI, Dynatrace, and Confluent.
Traefik Labs unveils an upgrade to API governance and integrations with Coraza WAF and Treblle API Observability. The company celebrates reaching 50,000 GitHub stars, reinforcing its dedication to open-source.
GetScraping.com introduces a web scraping API service to support various industries in data extraction tasks. The service promises efficiency and scalability for clients' diverse data-gathering needs.
Equifax reports over three million adults in Canada lack a credit history, hindering their ability to access credit for major life events. Zenbase, a Calgary-based company, introduces Canada's first rental reporting API, enabling the integration of rental payments into credit-building solutions in partnership with APOLLO Insurance.
AI
OpenAI has upped API rate limits for tier 5 and ChatGPT Plus/Teams users for its new o1 LLMs. The o1-preview query limit increased to 500/minute and o1-mini to 1,000/minute, with growth anticipated after revenue optimization.
Deepdub, an Israeli AI startup, has launched its Enterprise Plan featuring API integration for scalable localization in media. The plan enhances dubbing quality with better voice synthesis and cultural adaptation, while the company reports a fivefold revenue increase.
Gcore announced the launch of Gcore WAAP, their AI-driven web application and API protection solution integrating WAF, DDoS protection, bot management, and API security. Gcore WAAP, developed after acquiring StackPath WAAP, offers robust, compliant security across industries with an easy-to-use platform at a competitive price.
Deepgram has unveiled a new API that enables AI-driven voice interactions. This technology promises more lifelike and engaging AI conversations. See additional coverage on AIThority and Martechcube.
Fintech and Crypto
Sovcombank and MOVIM have set up API integration to speed up mortgage processing for real estate buyers on MOVIM's platform. The integration, open to all, offers Sovcombank's full mortgage options, which have already been adopted by over 100 companies.
Mesh, a connectivity layer for crypto, has integrated with Coinbase to join the latter's Advanced API program. The collaboration will enable seamless crypto transactions and access to Coinbase's liquidity directly from Mesh's platform.
Brex launched Brex Embedded payments, enabling B2B software vendors to integrate Brex's virtual card payment solutions into customer workflows. It partners with global companies, offering large credit limits and automating spend reconciliation. See additional coverage on The Paypers.
Sage provides a carbon accounting tool for banks to facilitate green lending and align with global net-zero targets. Their API helps SMEs report emissions, meets standards like the PCAF, and integrates advanced AI for data accuracy. See additional coverage on FinTech Magazine.
Security
A critical flaw in Azure API Management (APIM) lets Reader-level users escalate to Contributor levels, enabling alteration or deletion of APIM configurations. Microsoft patched this ARM API vulnerability by restricting Reader access, emphasizing the need for defense in depth and proactive security practices.
Penta Security's Cloudbric Managed Rules for AWS WAF - API Protection outperformed in The Tolly Group's comparative test with a 97.31% detection rate. The company offers six specialized Cloudbric Managed Rules on AWS Marketplace, with a SaaS model of Cloudbric WMS launching by year-end. See additional coverage on Kxan.
ABI Research emphasizes the balance between harnessing network API revenue potential and the accompanying security risks needing stringent protections. Securing APIs is vital, as mishandling could lead to vulnerabilities despite their role in aiding early threat detection.