Security Journey Blog

Security Culture

Aug 25, 2023

Filling the Developer Security Knowledge Gap

Are you experiencing the impact of a lack of developer security knowledge within your team? Many organizations are currently seeking ways to bridge the gap between security and development.  

Read More - Filling the Developer Security Knowledge Gap

OWASP Diligent Developer

Aug 24, 2023

OWASP Top 10 Insecure Design Explained

In this article, we will concentrate on Insecure Design and provide recommendations on how to avoid it in your code. We also suggest The Diligent Developer Chronicles as a great training tool for your development team. 

Read More - OWASP Top 10 Insecure Design Explained

Security Culture

Aug 23, 2023

3 Key Tips to Be a Successful Security Mentor

In today's interconnected world, it's essential to have effective mentorship programs in place to build up the next generation.  

Read More - 3 Key Tips to Be a Successful Security Mentor

Security Journey News

Aug 22, 2023

Security Journey Attains SOC 2 Type II Compliance Setting Industry Benchmark

Security Journey, a leading secure coding training provider, announces its achievement of SOC 2 Type II compliance, marking a significant milestone for the company and the secure coding training industry.

Read More - Security Journey Attains SOC 2 Type II Compliance Setting Industry Benchmark

Security Journey News

Aug 21, 2023

Google, Microsoft Take Refuge in Rust Language's Better Security

More tech giants are turning to the Rust programming language for its built-in memory safety and other security features.

Read More - Google, Microsoft Take Refuge in Rust Language's Better Security

Security Journey News

Aug 21, 2023

Combatting the OpenSSH Vulnerability

The recent security flaw in OpenSSH sheds light on the persistent potential for vulnerabilities in even widely-used and reviewed software.

Read More - Combatting the OpenSSH Vulnerability

OWASP Diligent Developer

Aug 17, 2023

OWASP Top 10 Injection Attacks Explained

In this article, we will focus on Injection Attacks and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team. 

Read More - OWASP Top 10 Injection Attacks Explained

OWASP Diligent Developer

Aug 15, 2023

OWASP Top 10 Cryptographic Failures Explained

In this article, we will focus on Cryptographic Failures and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team. 

Read More - OWASP Top 10 Cryptographic Failures Explained

OWASP Diligent Developer

Aug 10, 2023

OWASP Top 10 Broken Access Control Explained

In this article, we will focus on Broken Access Control and advise how to prevent it in your code. We also recommend The Diligent Developer Chronicles as a useful training resource for your development team. 

Read More - OWASP Top 10 Broken Access Control Explained

OWASP Diligent Developer

Aug 8, 2023

A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles

The Diligent Developer Security Awareness and Education Program is designed to raise awareness about application security and build skills across your development team to empower them to build secure software. 

Read More - A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles

Secure Coding Training Security Culture

Aug 3, 2023

Why It's Important to Train More Than Just Developers

The SDLC is a complex process that involves many different roles. Traditionally, application security training has focused on developers. However, in today's world, it's also important to train non-developers on application security. 

Read More - Why It's Important to Train More Than Just Developers

Secure Coding Training Security Culture

Aug 1, 2023

How Zoom Keeps Businesses Secure: A Secure Coding Training Case Study

“This [AppSec] doesn’t always come naturally to developers. It’s not that they don’t want to be more secure; they just don’t always know how,” said Robert Walker, who leads Secure Software Development at Zoom. 

Read More - How Zoom Keeps Businesses Secure: A Secure Coding Training Case Study