Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Developer-Tailored Secure Code Training: A New Approach from Security Journey
Security training for developers has traditionally been a one-size-fits-all experience—generic, compliance-driven, and...
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing...
Posts by Security Journey/HackEDU Team
How to Evaluate Developer Engagement and Learning in Secure Code Training
Security is a critical aspect of software development, and secure coding practices help mitigate vulnerabilities before they become costly breaches. However, simply implementing a secure code...
10 Professional Developers on the True Promise and Peril of Vibe Coding
THIS ARTICLE WAS WRITTEN BY DAVID GEWIRTZ FOR ZDNET.COM.
Is vibe coding the future of software or a security nightmare in disguise? Here's how experienced developers are responding to the latest...
Developer-Tailored Secure Code Training: A New Approach from Security Journey
Security training for developers has traditionally been a one-size-fits-all experience—generic, compliance-driven, and often irrelevant to a developer’s actual work. At Security Journey, we recognize...
Empower Developers to Preserve Human Agency in Today’s World of Automation
Nearly everything we use is built on code, from cars to smart fridges to doorbells. In businesses, countless applications keep devices, workflows, and operations running.
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing security vulnerabilities. This week, we’re excited to announce the release of ...
Server-Side Request Forgery Attacks: What Devs Need to Know
We'll explore the reasons for PCI-DSS's existence, the consequences of non-compliance, and how adhering to these standards benefits both your business and your customers.
Understanding Denial of Service (DoS) Attacks: A Comprehensive Guide
We'll explore the reasons for PCI-DSS's existence, the consequences of non-compliance, and how adhering to these standards benefits both your business and your customers.
AI and Education: Empowering Developers to Preserve Human Agency in a World of Automation
January 24th marks the International Day of Education, and this year’s theme, "AI and Education: Preserving Human Agency in a World of Automation," couldn’t be more relevant. As AI continues to...
5 Types of Data You Should NEVER Share with AI
Large language models (LLMs) like ChatGPT are powerful tools, but it's crucial to remember that data privacy is paramount.
Security Journey 2024: A Year of Powerful Product Enhancements
These updates, designed for ease of use, focus on streamlining user management, enhancing learning customization, expanding hands-on content, and improving overall platform usability.
Cracking the Code: Unveiling the Importance of CWEs in Cybersecurity
In this post, we'll delve into the world of CWEs, explaining what they are, why they're essential, and how they can be used to build more secure software.