LG ThinQ API, Boomi + Rivery, McDonald's Delivery Flaw
The API Changelog issue 2024.52
This is issue 2024.52 of the API Changelog, a mix of API news, commentary, and opinion. In this issue, you'll get to know the most relevant API-related information from the week of December 16, 2024. Subscribe now so you never miss an issue of the API Changelog.
This issue of the API Changelog was crafted with the help of Theneo.
Unlock the future of API documentation with Theneo—trusted by over 12,000 companies. Theneo automates your API docs using advanced AI. Automatically update docs when your APIs change, stay ahead with automatic API changelogs, and support any type of API. Collaborate in real-time and create customizable docs that reflect your brand.
Announcements
Aviva and Acturis have launched a claims API enhancing the efficiency of brokers' claims handling. The new API streamlines data transfer and updates, set for broader rollout in Q1 2025 after a successful pilot.
LianLian Global and Klasha facilitate cross-border payments from China to Africa, aiding Asian company growth. These services allow easier market penetration for Asian enterprises in African markets.
The latest FairCom's RTG v5 enables easy interfacing of legacy COBOL data with modern SQL and JSON APIs. This update allows for scalability and replication, revitalizing foundational COBOL systems without altering source code. See additional coverage on Silicon.
LG Electronics opens its ThinQ API to developers, facilitating smarter home integration and innovation. The acquisition of Athom enhances LG's ecosystem, merging AI with an extensive IoT connectivity for advanced home solutions. See additional coverage on Maeil Business Newpaper, Essential Install, CEPro, and Tech Edt.
SOLVE launched a new API Developer Portal to improve access and integration of its predictive and historical pricing data for fixed-income assets. The portal offers a single hub with testing environments, documentation, and structured data to enhance developer productivity and decision-making.
DealHub.io announced its API-first, headless quoting architecture to enhance automation for various sales channels. The new environment integrates with multiple CRMs and allows omnichannel revenue generation using a modular, logic-driven configuration engine.
Mavenir and Spry Fox Networks partner to offer CSPs a pre-integrated, GSMA Open Gateway-based platform for fast API monetization. The solution enables CSPs to quickly launch and monetize new API services, ensuring market agility and new revenue opportunities. See additional coverage on 5G Americas.
TravClan, a B2B travel platform, equips agents with online sales tools and offers comprehensive services, revolutionizing the industry with its Volt API. Volt integrates hotels, flights, and experiences with AI personalization, driving efficiency and transforming travel planning. See additional coverage on BWHotelier.
Funding and M&A
Gigs, the mobile services OS, secured a $73M Series B funding to enhance its products and global reach. The platform simplifies launching mobile services for tech companies, aiming to transform and integrate connectivity into digital products.
Nscale has positioned itself as an artificial intelligence-focused cloud provider, identifying a niche market amid growing demand for GPUs and AI capabilities while securing a $155 million Series A funding. The company's strategy includes in-house development and targeting significant expansions with key facilities, such as their operational 30 MW data center in Norway and a partnership with Nokia for networking solutions.
Boomi is set to acquire Rivery to enhance data management, with the deal closing by 2024. The merger will yield a unified platform with advanced data integration and AI capabilities.
AI
Elon Musk’s artificial intelligence company, xAI, released the enhanced Grok-2 chatbot on the social platform X for free, featuring image generation. The Grok-2 is integrated with X, offering real-time insights and contextual analysis, while the enterprise API allows developers to build apps with advanced AI features.
Google is adding a canvas editing option to Gemini for direct text manipulation, with cloud sync implying Google Drive integration. The company is also developing scheduled prompts and an image editor, potentially enhancing Gemini with multi-modal image generation.
Infobip and Telekom Business Europe have partnered to improve Europe's business communication with a versatile AI-powered platform. The platform will offer omnichannel engagement, including SMS, RCS, and social media, boosting business productivity and digital presence.
OpenAI has no current plans to offer a Sora API, citing heavy initial demand and capacity issues. Google and other competitors like AWS and Runway are progressing with video model APIs. See additional coverage on StartupNews.
Perfect Corp. has unveiled AI APIs to innovate beauty tech integration, offering scalable, creative solutions for developers. These APIs allow for personalization in beauty tech, serving industries with customizable, engaging user experiences.
Fintech
Aptia will integrate HSBC's payment pre-validation API to improve payment efficiency. This collaboration aims to enhance accuracy in benefit disbursements. See additional coverage on The Paypers and Finextra.
OKX launched a striking ad campaign in Sydney, comparing crypto prices with local house prices to spike interest. The campaign highlights OKX's user-focused trading platform by displaying real-time cryptocurrency values in public spaces.
CADE and BCB greenlighted PayRetailers' buyout of Transfeera, a business-focused fintech. The deal enhances PayRetailers' capabilities in payment processing solutions.
BigTime Software announced its integration with Intuit Enterprise Suite, offering enhanced project management and financial workflows. The integration, utilizing robust APIs, aims to improve productivity and reduce manual tasks for shared customers.
Security
A security researcher discovered serious flaws in McDonald's McDelivery app, enabling almost free orders and revealing rider locations. McDonald's promptly fixed the vulnerabilities reported through their bug bounty program, demonstrating their commitment to cybersecurity.
France's four leading mobile operators—Bouygues Telecom, Free, Orange, and SFR—are launching APIs for identity verification to fight online fraud. These operators are the first in the world to introduce KYC Match API, aiming to secure transactions and protect digital identities.
Wallarm's research shows APIs can be found by threat actors in seconds, posing a high-security risk due to poor management. The report suggests using less predictable endpoint names than "/status" to improve security. See additional coverage on Security Boulevard.
Spirion has launched version 13.3 of its platform, featuring a new Reporting API for enhanced data accessibility and integrations. The update improves data security management with additional features like enhanced inventory, bulk imports, and audit log controls. See additional coverage on Bezinga and EIN Presswire.
Akamai Technologies, Inc. has been lauded as a market leader in API Security, receiving several industry awards and top analyst recognition. With a spike in API attacks, Akamai's solutions are imperative for businesses to defend against data breaches and ensure operational efficiency. See additional coverage on Akamai and MorningStar.
An attacker compromised BeyondTrust's Remote Support SaaS API key, affecting a limited number of customers. The company fixed related vulnerabilities, and a third-party firm is assisting with the investigation.