On January 2, 2025, Kong became aware that an unauthorized actor had been able to publish a Docker image containing a cryptominer to the Kong DockerHub registry that affected v. 3.4.0 of the open source Kong Ingress Controller (KIC). Our security team immediately revoked any public access to the…
As AI technologies continue to revolutionize industries, organizations must balance innovation with responsibility. Kong understands that embracing AI involves not just adopting new tools but also ensuring they're secure, compliant, and sustainable. During a recent visit to Singapore, Kong's…
Ensuring secure access to applications and APIs is critical. As organizations increasingly adopt microservices architectures and cloud native solutions, the need for robust, fine-grained access control mechanisms becomes paramount. This is where the combination of Open Policy Agent (OPA) and Kong…
Today we're excited to announce Kong Gateway 3.9! Since unveiling Kong Gateway 3.8 at API Summit 2024 just a few months ago, we’ve been busy making important updates and improvements to Kong Gateway. This release introduces new functionality around LLM support for AI governance and security and…
APIs facilitate effortless communication and data exchange between applications and services. However, their inherent design, which codifies service capabilities within the API definition, makes them easily exploitable by malicious actors. API attacks in the US alone are projected to cost $506…
Happy holidays everyone! We've been working hard on the Kong Ingress Controller (KIC) and the latest 3.4 release is jam-packed with new features, bugfixes, and improvements. With this update, we're introducing easier TLS encryption, enhanced performance during complex deployments, and general…
We recently released Kong Gateway Operator 1.4 with support for managing Konnect entities from within the Kubernetes clusters. This means users can now manage their Konnect configurations declaratively, through Kubernetes resources powered by Kong’s Custom Resource Definition s. For example, here’s…
Kong Konnect is Kong’s infrastructural SaaS solution. We run the control planes and API management applications for the data planes (API gateway and mesh) that are run by our customers to power their APIs. Some of the most critical traffic in the world goes through these data planes. The…
We’re excited to announce that Kong Konnect is available in two new geographic regions (“geos”): the Middle East (UAE) and India. With this expansion, Konnect is now hosted in five geos worldwide, including the US, EU, and Australia. This means Konnect’s core services and applications — including…
Kong Insomnia 10.2 is now generally available with some exciting new features and improvements! As usual, we strongly recommend upgrading to this latest version and to always use the most recent release of Insomnia. Insomnia natively supports 100% local storage, Cloud Sync, and Git Sync. With Git…
Today — alongside the announcement of Kong Insomnia 10.2 — we're excited to introduce two new Kong Insomnia enterprise capabilities that will improve user management at scale across every organization. These new features are available to use for every existing enterprise customer, and they…
You’ve probably heard of generative AI, which uses deep learning models to simulate human decision-making by processing large amounts of data, and then responding with pertinent new content. Since the arrival of ChatGPT in 2022, generative AI has come a long way — but now there’s another technology…
More than 80% of developers and business leaders say AI investments have already created the opportunity for new products or services, according to Kong’s 2024 API Impact Report . Clearly, AI has proven its value and place in the enterprise, but with new innovations come new potential…
In today's interconnected web ecosystem, modern applications frequently need to communicate across different domains, making Cross-Origin Resource Sharing (CORS) a fundamental concept for web developers to master. This comprehensive guide explores CORS from its basic principles to advanced…
More than ever, it’s vital for organizations to develop software fast . Businesses are ever seeking ways to speed up their development, launch products sooner, and beat the competition. This is where AI proxies come into play. They're a new technology that helps developers solve tough software…