Quick Summary
Craig Riddell, the Global Field CISO at Wallarm, emphasizes the importance of API security as a critical yet often misunderstood layer of cybersecurity. He highlights that APIs are central to cloud and AI operations, making them a prime target for attackers exploiting legitimate behavior. Riddell advocates for a shift towards runtime, intent-aware protection to adapt to evolving business needs, stressing that organizations often lack visibility into their API usage, which complicates security efforts.
The Securityish Brief
Craig Riddell has recently taken on the role of Global Field CISO at Wallarm, where he focuses on the critical importance of API security. He notes that APIs are integral to modern digital transformations, particularly in cloud and AI environments, as they facilitate the flow of data, identity, and automation. This shift has made traditional security perimeters less effective, as attackers increasingly exploit legitimate API behaviors rather than relying solely on vulnerabilities.
Riddell points out that many organizations do not fully understand how their APIs are utilized, which leads to significant security gaps. He believes that the future of API security will rely on runtime, intent-aware protection that evolves alongside business operations, rather than static configurations. This approach is essential for reducing friction and enhancing security effectiveness.
His insights reflect a broader trend in cybersecurity where the focus is shifting from merely having the best tools to understanding the context of security risks within the business landscape. Riddell emphasizes that security must be a shared responsibility across all business units, aligning with the rise of roles like Business Information Security Officers (BISOs).
He also highlights the importance of incident readiness, advocating for tabletop exercises that prepare teams for real-world scenarios. This preparation fosters better communication and decision-making during incidents, which is crucial for effective incident response.
As organizations increasingly adopt AI technologies, Riddell warns that security teams must adapt in real-time to the expanding attack surface created by complex integrations and APIs. The challenge of visibility remains a significant concern, as understanding API behavior is vital for effective protection.
- API Security: A critical layer in modern cybersecurity that is often misunderstood and under-prioritized.
- Runtime Protection: A security approach that adapts to business changes rather than relying on static configurations.
- Business Information Security Officers (BISOs): Emerging roles that highlight the need for security to be integrated across business functions.
- Incident Readiness: The practice of preparing teams through tabletop exercises to improve response during real incidents.
- Visibility Challenges: The difficulty organizations face in understanding how their APIs are used, impacting their security posture.
Key Takeaways
- Assess your organization’s API usage to identify visibility gaps and potential security risks.
- Implement runtime, intent-aware protection for APIs to adapt to changing business needs.
- Conduct regular tabletop exercises with your security team to improve incident response capabilities.
- Encourage a culture of shared security responsibility across all business units to enhance overall security posture.
- Stay informed about the latest developments in AI and API security to ensure your strategies remain effective.
Key Terms & Concepts
- API Security: In this article, API security refers to the protection of application programming interfaces from malicious attacks.
- Runtime Protection: Runtime protection is a security approach that adapts to the behavior of applications in real-time, rather than relying on static configurations.
- Business Information Security Officers (BISOs): BISOs are roles that emphasize the integration of security practices across various business functions.
- Incident Readiness: Incident readiness refers to the preparedness of teams to respond effectively to security incidents through practice and planning.
- Visibility Challenges: Visibility challenges are difficulties organizations face in understanding how their APIs are utilized, which can lead to security vulnerabilities.
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
