CHANGZHOU, China, Sept. 20, 2026 /PRNewswire/ — On September 17, State Grid Changzhou Power Supply Company dispatched maintenance crews to conduct special inspections of charging piles for buses and private vehicles at Jintan High‑Speed Railway Station, identifying and rectifying potential hazards in advance to prepare reliable charging services for travellers during the upcoming Mid‑Autumn Festival and National Day holiday.

As the two major holidays draw near, a sharp rise in travellers choosing the “high‑speed rail + new energy vehicle” travel model is expected along the Shanghai–Nanjing Yangtze River bank corridor. Surging passenger flows will drive robust growth in EV charging and battery‑swapping demand, placing higher requirements on the reliability and service efficiency of charging infrastructure. In response, State Grid Changzhou Power Supply Company rolled out pre‑holiday arrangements, carried out hazard inspections and assigned extra field technicians to fully guarantee safe EV charging.

The utility conducted comprehensive defect elimination at charging stations around highway service areas, high‑speed railway stations and tourist attractions including Oriental Salt Lake Resort to keep charging equipment in optimal operating condition. It also deployed drones for special patrols of power supply lines serving charging sites. This approach broadens inspection coverage, improves efficiency and enables real‑time monitoring of equipment performance to secure stable power delivery for charging facilities.

To meet holiday refuelling demand for electric buses, four additional DC charging piles have been installed at Jintan High‑Speed Railway Station. The expansion accelerates charging for electric buses and cuts waiting time, delivering a more convenient and efficient travel experience for visitors. Optimised on‑call maintenance schedules and enhanced emergency response protocols have also been put in place to enable rapid troubleshooting in the event of equipment faults.

State Grid Changzhou Power Supply Company stated it will continue monitoring charging station operations and passenger volume throughout the holiday period. By sustaining robust power service support, the company facilitates low‑carbon green mobility and ensures visitors enjoy “worry‑free charging and smooth journeys” this Mid‑Autumn and National Day break.

View original content:https://www.prnewswire.com/apac/news-releases/state-grid-changzhou-power-supply-company-safeguards-green-travel-for-dual-festivals-302883985.html

SOURCE State Grid Changzhou Power Supply Company

Broken object level authorization, the access-control flaw behind a large share of real-world API data breaches, is now tested automatically across every endpoint in a customer’s API collection. Siemba reads the actual API response to confirm each finding, and returns reproduction steps a developer can act on immediately.

ATLANTA, Sept. 20, 2026 /PRNewswire/ — Siemba, a continuous offensive security provider, today announced automated testing for insecure direct object reference (IDOR) as part of its API Security Testing capability, which tests REST, GraphQL and SOAP APIs for the vulnerability classes most likely to expose customer data.

A 200-endpoint API collection can be tested for IDOR in under an hour. The same coverage has typically taken a human tester days or weeks, working endpoint by endpoint, and produced a written report days after that. Siemba compresses both the testing and the reporting into a single continuous run, against the API as it is actually deployed, with no source code required.

What is IDOR, and why does it matter?

IDOR is an authorization flaw. A vulnerable endpoint fails to check whether the identifier a caller supplied belongs to them, so changing a single number or identifier in a request can be enough to view or modify someone else’s data. OWASP classifies it as broken object level authorization (BOLA), and ranks it first in the OWASP API Security Top 10.

The flaw does not require a sophisticated exploit. It is conceptually simple but tedious to verify exhaustively across every endpoint and parameter, which makes it one of the easiest classes of vulnerability to miss at scale, and one of the most consistently cited causes of API breach disclosures.

“Most API vulnerabilities aren’t exotic,” said Sandhya Prashanth, Co-founder and Chief Security Officer, Siemba. “They are one user’s session reading another user’s data because nobody checked. That is IDOR, and it drives a huge share of real-world breaches. It needs almost no source-level reasoning to find, only the discipline to test every endpoint against it, systematically. That is exactly the kind of work automation should be doing continuously, so security teams can spend their attention on what automation cannot reason about: chained flows and privilege boundaries.”

How does Siemba test for IDOR?

Testing starts from the API definition a team already maintains, supplied as an OpenAPI or Swagger file, a Postman collection, or a collection URL. The customer supplies a set of identifiers, and authenticated sessions are handled by the platform. Siemba writes and runs the resulting test cases across every endpoint carrying an ID-like parameter.

Each result is judged by reading the actual API response, not by matching a signature or a status code. A 200 carrying an empty result or a generic error page is not scored as a pass. This is what separates a confirmed finding from the volume of noise that makes automated authorization testing hard to trust, and it is why every finding Siemba returns arrives already written up with reproduction steps rather than queued for a reporting phase.

Each protocol is tested to its own specification. REST endpoints are tested individually across path, query, header and body parameters. GraphQL schemas are resolved through introspection analysis, then tested for schema exposure, query depth and batching abuse, alias overloading, and field-level authorization. SOAP operations are parsed from WSDL and tested for XML external entity injection, signature wrapping, SOAPAction manipulation, and WS-Security misconfiguration.

What automation covers, and what it does not

Confirmed findings are mapped automatically to nine of the ten categories of the OWASP API Security Top 10. The tenth, broken function level authorization, along with chained attack paths and nuanced privilege-boundary testing, is covered by Siemba’s certified penetration testers working from the same platform. An expert-led engagement therefore starts from a known baseline instead of beginning reconnaissance from zero, which puts more of the engagement budget into the work only a human can do.

The practical difference is coverage and continuity. A tester under time pressure samples endpoints. Automation tests all of them, across every ID-like parameter in every position. And a point-in-time engagement certifies an API on the day it ran, leaving every endpoint shipped afterward untested until the next one. Continuous testing closes that window.

Built to run against production

Customers control test pace through four throttle presets, from a stealth mode suited to business hours through to a turbo mode for dedicated testing windows, with independent control over requests per second, concurrent test cases, and request timeout. Freeze windows of up to 30 days let teams pause testing automatically around production freezes, peak trading periods, or critical releases, with no manual ticket required.

Together these controls mean IDOR testing runs against production, where the data and the authorization logic are real, rather than against a staging environment that has drifted from it.

Availability

Siemba API Security Testing, including automated IDOR testing, is available today as part of the Siemba platform, alongside the company’s existing External Attack Surface Management, Autonomous DAST, and Vulnerability Assessment products.

About Siemba

Siemba combines attack surface mapping, autonomous dynamic testing, AI-driven vulnerability assessment, and expert-led penetration testing into one continuous program. Its certified in-house pentesters are trusted by the Big 4, and every fix is revalidated automatically on the platform and expert-signed on engagements. Siemba covers web, mobile, cloud, and AI systems including large language models and AI agents. Headquartered in Alpharetta, Georgia, Siemba has been named a Sample Vendor in the Gartner® Hype Cycle™ for Application Security, the Gartner Hype Cycle for Security Operations, and the Gartner Hype Cycle for XaaS (Everything as a Service) in 2024, 2025 and 2026.

View original content to download multimedia:https://www.prnewswire.com/news-releases/siemba-automates-idor-detection-across-live-apis-302883964.html

SOURCE Siemba

BEIJING, Sept. 20, 2026 /PRNewswire/ — In well-arranged rows of standardized greenhouses at a smart agriculture park in Shuiguo Township, Shizhong District of Zaozhuang City, Shandong Province, ornamental chrysanthemums are entering their peak harvesting season, ready to be picked, packed and shipped to overseas markets.

Traditional cultivation methods often resulted in inconsistent quality and poor adaptability to market demand. With smart agriculture playing a greater role, the Shuimu Fengnian Smart Agriculture Park in Shuiguo Township has adopted a highly efficient production mode of two-crop rotation system each year, which has not only diversified the product range but also enhanced the flowers’ adaptability to different markets.

During this year’s harvesting season, a total of 130,000 freshly cut chrysanthemums were exported to the Republic of Korea, 200,000 were sold to major Chinese cities including Beijing and Shanghai, and another 110,000 were supplied to the local market, creating a coordinated pattern of domestic and overseas sales.

The park is now preparing to plant one million chrysanthemums for the next crop. While expanding production and introducing new varieties, it also provides nearby farmers with a full range of services, including seedlings, technical support, cold-chain logistics and diversified sales channels. These efforts have helped create jobs and increase incomes for local farmers, and further boost the local economy.

Advanced cultivation technologies have enabled the ornamental chrysanthemums in the park to form a prominent market advantage in terms of growth cycles and product quality, steadily boosting the economic returns of the specialty flower industry. 

By taking into account the different needs in flowers between domestic and overseas markets, the park precisely matches varieties and harvesting standards to specific markets and relies on refined management to achieve stable yields and higher incomes.

Powered by technological advances and mode innovation, Shuiguo Township has blazed a new path toward green, efficient and export-oriented modern agriculture. The little chrysanthemums have contributed to higher agricultural efficiency and incomes for farmers, offering a replicable model for the transformation and upgrading of specialty agriculture in Shizhong District.

Original link: https://en.imsilkroad.com/p/352277.html

View original content:https://www.prnewswire.com/apac/news-releases/xinhua-silk-road-smart-farming-helps-zaozhuang-chrysanthemums-bloom-into-a-lucrative-industry-302883983.html

SOURCE CEIS