Security Journey Blog

Secure Coding Training

Nov 20, 2024

Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance

Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.  

Read More - Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance

Compliance & Regulations

Nov 12, 2024

Risk and Compliance Officers Guide to AI

While AI presents opportunities for efficiency and innovation, it also brings complex challenges that require immediate attention.

Read More - Risk and Compliance Officers Guide to AI

Research

Nov 7, 2024

3 Technologies Revolutionizing Cybersecurity in Finance

According to the Ponemon Institute, the average cost of a data breach in the financial sector is a staggering $5.97 million, emphasizing the critical need for robust cybersecurity measures. 

Read More - 3 Technologies Revolutionizing Cybersecurity in Finance

Application Security

Nov 4, 2024

AI/LLM Secure Coding Training: Don't Let Innovation Outpace Security

Developers need to be aware of this risk and treat user-supplied input that interacts with the AI/LLM with the same level of scrutiny as any other external input.

Read More - AI/LLM Secure Coding Training: Don't Let Innovation Outpace Security

OWASP

Oct 29, 2024

API Security is NOT Optional: Why the OWASP API Top 10 is Your New Priority

APIs are crucial in modern software, facilitating app integrations and microservices. However, their widespread use increases the attack surface, with each endpoint posing a potential risk for exploitation and data breaches.

Read More - API Security is NOT Optional: Why the OWASP API Top 10 is Your New Priority

OWASP

Oct 24, 2024

Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI recently released a joint guide highlighting exceptionally risky software development practices that all organizations should avoid.  

Read More - Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

Secure Coding Training

Oct 18, 2024

Code Red: Closing the Cybersecurity Skill Gap in Finance

Here's the alarming truth: many financial institutions are struggling to defend themselves, not because of a lack of technology, but a lack of skilled cybersecurity professionals.  

Read More - Code Red: Closing the Cybersecurity Skill Gap in Finance

Application Security

Oct 16, 2024

AI Security: Actionable Guide to Building Secure AI-Driven Products

The rise of AI brings incredible opportunities, but also unprecedented security challenges. At Security Journey, we believe security is not a mere checklist, but an ongoing journey.  

Read More - AI Security: Actionable Guide to Building Secure AI-Driven Products

Security Culture

Oct 10, 2024

10 Ways Your Organization Can Celebrate Cyber Security Awareness Month

Cybersecurity Awareness Month isn't just about checking boxes; it's about building a security-minded culture where everyone plays a part.  

Read More - 10 Ways Your Organization Can Celebrate Cyber Security Awareness Month

Security Journey News

Oct 9, 2024

AI is Supercharging Threats: Level Up Your Defenses with Security Journey

The cybersecurity landscape is evolving – fast. AI isn't just automating our lives; it's giving attackers new tools.

Read More - AI is Supercharging Threats: Level Up Your Defenses with Security Journey

Secure Coding Training

Oct 4, 2024

Kia's Web Portal Vulnerability: A Wake-Up Call for API Security

The automotive industry just got a stark reminder that "connected" doesn't just mean convenience but also a whole new world of security risks.  

Read More - Kia's Web Portal Vulnerability: A Wake-Up Call for API Security

Application Security Security Culture

Oct 2, 2024

What Engineering Leaders Need to Know About AI Security

The AI revolution is transforming software development at an unprecedented pace, bringing a new wave of security challenges. As engineering leaders, we're not just building the future; we're securing it.

Read More - What Engineering Leaders Need to Know About AI Security