3 Key Tips to Be a Successful Security Mentor
In today's interconnected world, it's essential to have effective mentorship programs in place to build up the next generation.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Developer-Tailored Secure Code Training: A New Approach from Security Journey
Security training for developers has traditionally been a one-size-fits-all experience—generic, compliance-driven, and...
New Content for Your Most Pressing & Emerging Vulnerabilities: AI/LLM & CWE Top 25
At Security Journey, we continuously evolve our training content to help organizations stay ahead of the most pressing...
Security Journey Attains SOC 2 Type II Compliance Setting Industry Benchmark
Security Journey, a leading secure coding training provider, announces its achievement of SOC 2 Type II compliance, marking a significant milestone for the company and the secure coding training industry.
Google, Microsoft Take Refuge in Rust Language's Better Security
More tech giants are turning to the Rust programming language for its built-in memory safety and other security features.
Combatting the OpenSSH Vulnerability
The recent security flaw in OpenSSH sheds light on the persistent potential for vulnerabilities in even widely-used and reviewed software.
OWASP Top 10 Injection Attacks Explained
In this article, we will focus on Injection Attacks and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team.
OWASP Top 10 Cryptographic Failures Explained
In this article, we will focus on Cryptographic Failures and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team.
OWASP Top 10 Broken Access Control Explained
In this article, we will focus on Broken Access Control and advise how to prevent it in your code. We also recommend The Diligent Developer Chronicles as a useful training resource for your development team.
A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles
The Diligent Developer Security Awareness and Education Program is designed to raise awareness about application security and build skills across your development team to empower them to build secure software.
Why It's Important to Train More Than Just Developers
The SDLC is a complex process that involves many different roles. Traditionally, application security training has focused on developers. However, in today's world, it's also important to train non-developers on application security.
How Zoom Keeps Businesses Secure: A Secure Coding Training Case Study
“This [AppSec] doesn’t always come naturally to developers. It’s not that they don’t want to be more secure; they just don’t always know how,” said Robert Walker, who leads Secure Software Development at Zoom.
The AppSec Dilemma: Investing in Education Amidst Mass Tech Layoffs
This article was originally published on Solutions Review. From mass redundancies at Big Tech firms like Google, Meta, and Microsoft, to reducing teams in SMEs and small fintech startups, layoffs are impacting thousands of tech and cybersecurity workers.
White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships
This article was originally published on CPO Magazine. The much-anticipated implementation plan for the Biden administration’s National Cybersecurity Strategy was released late last week and a flurry of work in updating and improvement is now expected, particularly at federal civilian agencies that maintain legacy systems.