Leveraging CWEs in Secure Code Training
We are currently in an application security dilemma that costs organizations millions of dollars annually.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance
Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.
Read More
What You Need To Know About Secure Coding Training for PCI DSS v4.0 Requirements
The latest version of the Payment Card Industry Data Security Standard (PCI DSS), version 4.0, was released in March 2022. Although the requirements won't take effect until 2025, it's crucial to start preparing now.
Read More
Empower Developers to Preserve Human Agency in Today’s World of Automation
Nearly everything we use is built on code, from cars to smart fridges to doorbells. In businesses, countless applications keep devices, workflows, and operations running.
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing security vulnerabilities. This week, we’re excited to announce the release of ...
Server-Side Request Forgery Attacks: What Devs Need to Know
We'll explore the reasons for PCI-DSS's existence, the consequences of non-compliance, and how adhering to these standards benefits both your business and your customers.
Unlocking Developer Potential: Why Developer Security Knowledge Assessments Are Critical for Your Organization
In the interconnected landscape of APIs, robust security is non-negotiable to prevent devastating consequences such as data breaches, financial losses, and reputational damage.
From Disruption to Integration: Rethinking Just-in-Time Security Training
In the interconnected landscape of APIs, robust security is non-negotiable to prevent devastating consequences such as data breaches, financial losses, and reputational damage.
Understanding Denial of Service (DoS) Attacks: A Comprehensive Guide
We'll explore the reasons for PCI-DSS's existence, the consequences of non-compliance, and how adhering to these standards benefits both your business and your customers.
Navigating the AI Threat Landscape in 2025: Challenges and Strategies
Mike talks to Chris Romeo about the growth of champions programs, the Security Champions Framework, and the mistake that organizations make with their programs.
AI and Education: Empowering Developers to Preserve Human Agency in a World of Automation
January 24th marks the International Day of Education, and this year’s theme, "AI and Education: Preserving Human Agency in a World of Automation," couldn’t be more relevant. As AI continues to...
5 Types of Data You Should NEVER Share with AI
Large language models (LLMs) like ChatGPT are powerful tools, but it's crucial to remember that data privacy is paramount.
Security Journey 2024: A Year of Powerful Product Enhancements
These updates, designed for ease of use, focus on streamlining user management, enhancing learning customization, expanding hands-on content, and improving overall platform usability.
Cracking the Code: Unveiling the Importance of CWEs in Cybersecurity
In this post, we'll delve into the world of CWEs, explaining what they are, why they're essential, and how they can be used to build more secure software.