Jeremy Snyder

Articles by

October 15, 2025

A View from the C-suite: Aligning AI security to the NIST RMF

In 2025, AI is revolutionizing our cyber landscape and changing everything we know about cybersecurity. Luckily, the NIST AI Risk Management Framework is here to help. Join us for an in-depth exploration of the AI RMF, which is updated for the present landscape.



June 20, 2025

OpenAI Used Globally for Attacks

It is no secret in 2025 that AI can be abused to launch attacks by threat actors. But the “how” and “why” of these use cases is continuing to change. A recent security report revealed many of the ways in which OpenAI’s ChatGPT could be exploited.



May 30, 2025

The Sequential Kill Chain for AI

We’ve talked before about Mean Time To Attack, or MTTA, which has grown alarmingly short for new vulnerabilities across the cyber landscape. In this blog, we’ll dive into the “how” and “why” of this…



May 14, 2025

Logging AI before it happens

Did you know that some AI chats capture and log your chat before you even submit it? This creates a huge security problem for both individuals and organizations whose employees use LLMs. Luckily, FireTail is working on a solution...



May 8, 2025

An open letter to FireTail customers about security and data privacy

Our modern “Software as a Service” model is becoming a challenge for cybersecurity teams within large enterprises, as attacks continue to rise in volume and complexity across the cyber realm. Security needs to be a consideration from code to cloud, or any progress we make will be undone just as quickly.



November 21, 2024

The Secrets of APIs...

This blog post will answer questions such as: But where do APIs live? And how do they interact? What languages do they use?



November 20, 2024

API Security: The Overlooked Threat Now Overshadowing Cloud Misconfigurations

The latest blog from the C-suite at FireTail attempts to answer the essential question: “Which is a bigger threat today - cloud misconfigurations or API vulnerabilities?”



September 26, 2024

The Problem with APIs

APIs are everywhere and in every part of our lives. However, in recent years, attackers have been increasingly targeting APIs. So how do you secure an API, and whose responsibility is it?



July 29, 2024

APIs and The Phantom Attack Path

APIs are a shortcut to the data. They pass through quietly, creating a phantom attack path that flows through all the other layers of protection. And although cybersecurity has come a long way, there still aren’t controls to mitigate these risks.



May 20, 2024

Graph API Vulnerabilities on the Rise

Many application developers are still grappling with the integration challenge. Microsoft’s Graph API attempts to solve this problem, however, their solution comes with its own drawbacks.



April 11, 2024

Revisiting Cambridge Analytica in 2024

The Cambridge Analytica Data Scandal led to the collapse of the company, court cases and massive fines for Meta. It highlighted the massive impact that technology was having on society, politics and democracy. Now, almost a decade later, we take a look at how a poorly configured API started it all.



April 5, 2024

I was Wrong about Endpoint Security

Based on trends in changing compute architectures, it seemed logical that Endpoint Detection and Response companies would shrink their overall install base. Instead, EDR has evolved into Extended Detection and Response.



March 19, 2024

API Threats are Expanding Beyond the Enterprise

For the past couple of years, FireTail has been tracking API threats across the Internet. We recently learned of StopCrypt, a ransomware threat that leverages Windows APIs on consumer endpoints like laptop and desktop computers.



March 1, 2024

An Update on the Evolution of Cloud Security

FireTail CEO, Jeremy Snyder, explores the evolution of cloud security and where we are at in 2024. Examining breaches like CapitalOne and identifying where breaches occur based on his 4 quadrant model, Jeremy looks at Platformization and how the need for end-to-end API security is more pronounced than ever.



February 29, 2024

They Fought the Law (And The Law Won) - API Security, Regulatory Compliance, And Avoiding Massive Fines

The reality is that failing to invest in a proven API security posture might save you dollars in the short-term, but can cost millions in the long-term. We take a look at how increasing regulatory oversight is leading to massive fines.



February 27, 2024

Connecting the Dots: API Security for Building Modern Internet Services

The modern web is more connected than ever before. The move from monoliths to containerization and microservice-based architectures means API security is a must. In this blog, we look at what it takes to build secure modern internet services.



December 5, 2023

DFIR & API Breaches: Why Context Matters

When it comes to investigating and preventing API breaches, context is king. In this piece, we take a look at why application layer visibility is essential to effective digital forensics and incident response.



November 16, 2023

Getting Personal: CISOs in the Crosshairs as API Breaches Surge

With an ever-changing threat landscape, increased regulatory oversight and a desire among authorities to hold individual executives accountable for data breaches, these are tough times for CISOs. And as APIs become the attack vector of choice for bad actors, it’s more important than ever to prioritize effective API security at your organization.



November 13, 2023

Behavioral Analysis & API Security: After the Fact and Behind the Curve

API security solutions focused on ML/AI pattern recognition analyze behavior ‘out-of-band’ to identify anomalies, reporting issues after the fact. Prone to false positives, this approach also means attackers will have some success before you learn from it. That’s not acceptable.



November 13, 2023

API Gateways: Great for Management but Not for Security

Gateways are great, but not for security. API gateways are useful when it comes to API management but they were never designed with security in mind. They can't actively monitor API traffic, they don’t see inside payloads or detect real-time manipulation. They won’t stop most API attacks.



November 10, 2023

OpenAI Updates Will Open API Floodgates

Recently announced OpenAI changes mean users will be able to call any API. That’s great for business and the economy but a potential headache for security teams.



November 2, 2023

Unsecured APIs are now a Popular Delivery Mechanism in Ransomware Attacks

As they continue to rise in use, APIs are becoming a critical attack surface for ransomware groups.



October 4, 2023

Web Application Firewalls & API Security: Why WAFs Always Fall Short

While Web Application Firewalls, or WAFs, are often touted as a go-to solution for web app security, they frequently fall short – and in many cases, offer little more than an artificial sense of protection that is not backed by actual protection. But why isn’t a WAF good enough? Where do they fall short, and what is the better alternative? Let’s dive a bit deeper.



September 14, 2023

The Complex Connections between Generative AI and API Security

APIs and Artificial Intelligence are two of the most important developments in tech of the last 10 years. In this post, we look at the dual impacts that connect these two hot topics that make our online worlds work.



September 1, 2023

Moovit API Vulnerability - letting attackers move free of charge

During Defcon, a security researcher presented his findings from assessing a global transportation system, leveraging APIs.



August 25, 2023

moveIT - a series of breaches, all enabled by APIs

A file transfer software called moveIT experienced a vulnerability starting in mid-2023 that created a mass breach across many organizations and geographies. The breach is started by injection against an API administrative endpoint, and data is exfiltrated via administrative API calls.



August 22, 2023

IDOR Attacks and the Growing Threat to Your API Security

A recent advisory has highlighted the increasing threat posed by IDOR vulnerabilities. In this article, we explain Insecure Direct Object Reference (IDOR) attacks, explore their rise, and examine how these vulnerabilities impact API security.



August 15, 2023

API Security: Bridging the Gap Between Application and Security Teams

There’s a big API security problem most organizations need to address. It’s the gap that emerges between application and security teams. Here we look at what it takes to keep application and security teams on the same page when it comes to APIs.



July 19, 2023

Cybersecurity Maturity and Why Your API Security is Lagging Behind

A cybersecurity maturity model (CMM) provides an effective framework for optimizing your security posture. But, when it comes to API security, even sophisticated organizations will find that they still have a lot of work to do.



June 27, 2023

FireTail at InfoSecurity Europe 2023 - APIs: The attack vector that connects us all...and where traditional security fails

FireTail founder Jeremy Snyder discussed API security, some traditional approaches to cybersecurity, and why the two just don't work together as well as you might think.



June 12, 2023

FireTail at API Days Helsinki 2023 - Learning from Outliers

FireTail founder Jeremy Snyder discussed what we can learn about API security from Malcolm Gladwell's 'Outliers'



May 24, 2023

FireTail at API Days New York City 2023 - A decade of API breaches, courtesy of application logic flaws

FireTail founder Jeremy Snyder discussed FireTail's research into API security incidents and data breaches at API Days New York City.



May 22, 2023

Listen by Jean Ginzburg - API Security and FireTail.io

Jeremy Snyder, founder and CEO of FireTail.io, a leading cloud security & cybersecurity company. Discover the crucial importance of API security in today's cloud-based world.



May 2, 2023

Secure Talk Cybersecurity Podcast: API Security Challenges & Solutions

Jeremy Snyder introduces several best practices for securing APIs and the various apps that they connect with.



May 1, 2023

Risk Management Show: API Security

Jeremy Snyder talks about his experience with APIs, API security, and shares some tips, common mistakes, and more!



April 13, 2023

Ask a CISO Podcast: Threat Modeling with Adam Shostack

In this episode of the Ask a CISO podcast, we talk about threat modeling with guest Adam Shostack.



April 11, 2023

FireTail at UK Cyberweek 2023 - API security

FireTail founder Jeremy Snyder discussed API security to a standing-room-only crowd at UK Cyberweek in London in April 2023.



April 10, 2023

My door is always open

Nexx smart garage door openers have been proven to contain shared, unsecured API authentication credentials.



April 5, 2023

Introduction to REST API Security

The sheer number of APIs presents a challenge when it comes to ensuring that they operate correctly, efficiently, and above all, securely.



March 30, 2023

FireTail’s Guide to Maximizing Your Experience at RSA Conference 2023

RSA is all about building bridges and connections.



March 28, 2023

FireTail CEO, Jeremy Snyder, Set to Present at UK Cyber Week 2023

Meet up with the FireTail team at stand D20 in the exhibitor area at Uk Cyber Week!



March 23, 2023

Maximizing the Power of API Microservices Architecture: Best Practices and Key Considerations

API microservices architecture is a game-changing approach that can help businesses improve their systems and processes.



March 21, 2023

FireTail at APISecure 2023 - Learning from a decade of API breaches

FireTail founder Jeremy Snyder presented at APISecure 2023; Learning from a decade of API breaches and why application-centric security is the right path



March 15, 2023

Ask a CISO Podcast: Exploring the Challenges of Application Security

In this episode of the Ask a CISO podcast, we talk about application security with guest Tanya Janca.



March 14, 2023

Join FireTail virtually at API Secure 2023!

Join FireTail virtually at API Secure 2023! Jeremy Snyder will share learnings from a decade of API data breaches, and discuss why FireTail takes a unique approach to API security



March 10, 2023

FireTail's Paul MG will speak about the OWASP API Top 10 at Scale 20x

FireTail's Paul MG will speak about the OWASP API Top 10 at Scale 20x.



March 8, 2023

Ask a CISO Podcast: The Benefits of Threat Modeling

After a brief hiatus, we are back with Season 3 of the Ask A CISO podcast. There are quite a few things we are doing differently this season (details below), but first, let's welcome our first guest for the new season: Fausto Lendeborg, Co-Founder and Chief Customer Officer of Secberus, and learn more about his start in cybersecurity, DDoS attacks, dealing with alert fatigue, and understanding what IaC, SaC, and PaC are.



March 1, 2023

Ask a CISO Podcast: AI & ML in Cybersecurity

Join us on this episode of the Ask A CISO podcast as we discuss AI and ML in cybersecurity with Diana Kelley, CISO and co-founder of Cyberize. With International Women's Day in a week, we also look at the challenges of recruiting women and diversity in the tech sphere.



February 21, 2023

Ask a CISO Podcast: AI and the Future of Mobile Security

On this podcast episode, we learn about mobile security from Amit Modi, the Chief Technology Officer (CTO) and CISO of Movius Interactive Corporation, a leading global provider of cloud-based secure mobile communications software. The company helps enterprises deliver better engagement for their clients., and connect with their customers in more convenient, cost-effective, and compliant ways.



February 7, 2023

Ask a CISO Podcast: Understanding DSPM & CSPM for Optimal Data Security

On this episode, we had the opportunity to speak to Tyler Young, the CISO at BigID, a leading modern data security vendor that helps organizations with their data security, privacy, compliance, and governance.



February 1, 2023

Ask a CISO Podcast: Cybersecurity Risks and Business Context



January 24, 2023

FireTail Names Timo Rüppell as Vice President of Product

Timo Rüppell joins the FireTail executive leadership team as Vice President of Product, and FireTail has also opened a new company office in Helsinki, Finland.



January 11, 2023

FireTail’s 2022 Review on Macro, Industry, and Thoughts About What’s Next

FireTail founder and CEO shares some thoughts on 2022 and what's ahead for 2023.



January 4, 2023

A bumpy ride into API insecurity

Following on to previously reported connected car API problems, the worst disclosure to date has been published.



December 30, 2022

The Absolute Beginner's Guide to API Security 4/4

Think about how you would prepare a real-life heist. You’d spend some time preparing, right? Digital thieves do the same. They read API documentation, probe vulnerable endpoints, and [...]



December 30, 2022

Why You Should Take API Security Sirius-ly

SiriusXM, like Hyundai, designed and deployed weak APIs into the wild.



December 14, 2022

FireTail Raises $5M to Accelerate API Security, Led by Paladin Capital Group

FireTail Inc, a disruptor in API security, announced today it has closed $5 million in early stage financing led by Paladin Capital Group, with participation from Zscaler, General Advance, Secure Octane, and a cadre of high-profile cyber security executives including SentinelOne VP of Cloud Security Ely Kahn, Intel 471 CEO Mark Arena, and Shift5 CEO Josh Lospinoso.



December 6, 2022

Ask a CISO Podcast: Looking Back With the Hosts

In this last episode, we speak to our CEO, Paul Hadjy, Natasha, and Adi from our Indonesia office, Raphael Peyret, Vice-President of Product, and our US host, Jeremy Snyder, about their experience hosting the podcast.



December 1, 2022

Introducing FireTail: Making API Security as Simple as Import, Setup, Done

FireTail is on a mission to secure the world’s APIs. As of December 2022, we have launched the first version of our platform into production, securing our first paying customers and channel relationships.



December 1, 2022

My Car Won't Start (Because Someone Hacked my API)

According to FireTail’s First Law of API Security: If an API can be hacked and compromised, it will be. And indeed, security researchers found a vulnerability in myHyundai’s API that allowed a potential attacker to access functions that the app would allow, including starting the car, turning the lights on and off, locking the car and more.



November 29, 2022

The Absolute Beginner's Guide to API Security 3/4

Traditionally, IT and security teams have been separate from the rest of the organization. The security role relied on the aggregation of data and logs from all possible attack surfaces into the Security Operations Center (SOC) for analysis and [...]



November 28, 2022

FireTail present at the BlackHat Europe open source Arsenal 2022

FireTail present at the BlackHat Europe open source Arsenal December 2022



November 23, 2022

Ask a CISO Podcast: API Security

Veteran cybersecurity professional and our U.S.-based host Jeremy Snyder sits in the guest seat this week to talk about his new startup, FireTail.io, a company that offers simple yet effective API security.



November 18, 2022

FireTail at API World 2022

FireTail presented an overview of why API security is an application security problem, not a network security problem.



November 16, 2022

The Absolute Beginner's Guide to API Security 2/4

We can admit it, security gets in the way of software development pretty often. It can get in the way of your organization’s mission. Good security practices will help you avoid damage to reputation, and maintain a consistently secure & smooth experience for your [...]



November 15, 2022

Cyber Inspiration: Jeremy Snyder- CEO at FireTail

Host Evgeniy Kharam of the Cyber Inspiration podcast invites Jeremy Snyder on to speak about his experience as FireTail CEO.



November 8, 2022

Ask a CISO Podcast: Cyber Defense Matrix

Sounil Yu, the bestselling author of The #Cyber #Defense #Matrix, joins host Jeremy Snyder this week to talk about his book, and what we could all learn from it.



November 7, 2022

The Absolute Beginner's Guide to API Security

Let’s talk about the pervasiveness of APIs by discussing a real-life scenario most of us can relate to: hailing a trip on a rideshare app.So first, you open up the app using your phone and request a ride to your location. That sends a request from your phone[...]



November 2, 2022

Ask a CISO Podcast: Hypponen's Law

This week, we are joined by Mikko Hypponen, bestselling author of If It's Smart, It's Vulnerable.



October 28, 2022

Ask a CISO Podcast: the importance of hygiene in cybersecurity

How does cloud cost indicate cloud hygiene problems, and what is the implication for cybersecurity?



October 18, 2022

Ask a CISO Podcast: Project Zero Trust

In this episode, we are joined George Finney, author of Well Aware and Zero Trust.



October 13, 2022

Beyond Identity: API Security Starts With Authentication

Jeremy Snyder, Founder and CEO of FireTail.io joins Reece and Nelson to chat about the integral role that strong authentication plays in API security.



September 28, 2022

Major Telecom API Hack

This is a worst-case scenario for a breach of API security. Leaving an API endpoint online that does not require authentication is just asking for trouble, no matter how innocuous it may seem, as this provides an easy opening for hackers.



September 28, 2022

DevOps Institute SkilUp Presentation: Embedding API Security by Design into DevOps Pipelines



September 27, 2022

Ask a CISO Podcast: Threat Hunting and Incident Response

We speak to Harlan Carvey, Senior Incident Responder in R&D at Huntress, to understand what threat hunting is, and even learn how surprisingly easy it is to tell if an account has been compromised!



September 7, 2022

A wave of API companies

More companies are starting as API services, boosting the API economy.



September 7, 2022

Ask a CISO Podcast: Read, Game, Train, GO!

Jeremy Snyder hosted an episode of the Ask a CISO podcast with Eric Basu from World of Haiku



September 2, 2022

API with a Cache

Researchers have proven that data stored in a browser's cache can be accessed.



August 26, 2022

Smart Tub Mine Machine

Flaws in a smart hot tub's API expose data



August 10, 2022

What did we learn from presenting in the BlackHat open source Arsenal?

What did FireTail learn from presenting at the BlackHat 2022 open source Arsenal? We share our thoughts.



August 9, 2022

Ask a CISO Podcast: Cyber Mayday and The Day After

Dan Lohrmann, award-winning CISO, keynote speaker, mentor, columnist, and bestselling co-author of the book Cyber Mayday and the Day After joins us this week to talk about cybersecurity.



August 8, 2022

Turning Leftover API Credentials into Twitter Bot Armies

Apps with leftover API credentials can be exploited by bad actors to create a bot army.



August 1, 2022

Presentation from fwd:CloudSec on expanding cloud security quadrants

Jeremy Snyder presented a cloud security framework about expanding cloud security quadrants at fwd:CloudSec 2022



August 1, 2022

IT Security Spend is not a tax

Jeremy Snyder spoke with Dave Sobel of the Business of Tech Podcast about why IT Security Spend is not a tax



July 28, 2022

FireTail presenting at the BlackHat open source Arsenal 2022

FireTail presenting at the BlackHat open source Arsenal 2022 on Wednesday at 10am local time.



July 26, 2022

Ask a CISO Podcast: Zero Trust and Cyber Warfare

Dr. Chase Cunningham is Chief Strategy Officer at Ericom Software, a company that provides web isolation and remote application access software to businesses.



July 18, 2022

The FireTail API security blog starts now

Here at FireTail, we believe that API security is crucial moving forward. We are focused on what we believe will be the next attack vector – the API.



July 18, 2022

Speaking at InfoSecurity Europe

Jeremy Snyder will be speaking at InfoSecurity Europe, Europe’s leading cybersecurity conference. InfoSecurity Europe runs from June 21-23.



July 18, 2022

InfoSecurity Europe recap: Tackling Widespread Data Breaches from Third Parties

On Wednesday, June 22, 2022, Jeremy Snyder had the pleasure of participating in a moderated panel discussion titled “Tackling Widespread Data Breaches from Third Parties” at InfoSecurity Europe.



July 18, 2022

Reflecting on APIs in the time of COVID

While the COVID pandemic is far from over, the era of the COVID exposure app may be. With Canada sunsetting its COVID alert app, it’s a good time to reflect on how in this case the API gave birth to the app instead of vice versa.



July 18, 2022

The WAF must die - some interesting thoughts

A recent posting by Dr. Chase Cunningham from Ericom Software on LinkedIn took an interesting view on web application firewalls, most commonly known as a WAF.



July 18, 2022

InfoSecurity Europe 2022 Keynote: How to Accelerate the Adoption of New IAM Approaches and Technologies

Jeremy Snyder had the honor of doing a 10 minute lightning talk on the keynote stage of InfoSecurity Europe titled “How to Accelerate the Adoption of New IAM Approaches and Technologies.”



July 12, 2022

Ask a CISO Podcast: Insights from Infosecurity Europe 2022

Physical tradeshows are back, and our host Jeremy Snyder and guest James McKinlay were both at the recently-concluded InfoSecurity Europe 2022.



June 28, 2022

Ask a CISO Podcast: People, Process and Technology

How do you balance people, process, and technology, the three pillars of information security, to achieve a balanced security program? What can you do to bolster each pillar?



June 7, 2022

Ask a CISO Podcast: Future Tech and Cybersecurity- A Conversation with Chuck Brooks

Chuck Brooks is a world-renowned cybersecurity expert and an Adjunct Professor at Georgetown University where he teaches courses on risk management, homeland security, and cybersecurity.



May 24, 2022

Ask a CISO Podcast: The Human Defense Layer

Most cybersecurity programs work against human nature instead of with our innate behaviors, resulting in breaches even though your organizations may already have spent large amounts of money on security technologies.



May 17, 2022

Ask a CISO Podcast: A CISO's Take On the Gartner Magic Quadrant

Many security leaders refer to Gartner's Magic Quadrant to decide on which security tool to purchase and deploy to secure their environments.



November 24, 2021

Ask a CISO Podcast: The Evolution Of Cloud Security, Its Future, And 3 Tips for Your Cloud Security Journey

Jeremy gives us a glimpse of where cloud security is heading and three practical tips on how you can get started on your cloud security journey.

