Security Journey Blog

OWASP

Oct 24, 2024

Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI recently released a joint guide highlighting exceptionally risky software development practices that all organizations should avoid.  

Read More - Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

Secure Coding Training

Oct 18, 2024

Code Red: Closing the Cybersecurity Skill Gap in Finance

Here's the alarming truth: many financial institutions are struggling to defend themselves, not because of a lack of technology, but a lack of skilled cybersecurity professionals.  

Read More - Code Red: Closing the Cybersecurity Skill Gap in Finance

Application Security

Oct 16, 2024

AI Security: Actionable Guide to Building Secure AI-Driven Products

The rise of AI brings incredible opportunities, but also unprecedented security challenges. At Security Journey, we believe security is not a mere checklist, but an ongoing journey.  

Read More - AI Security: Actionable Guide to Building Secure AI-Driven Products

Security Culture

Oct 10, 2024

10 Ways Your Organization Can Celebrate Cyber Security Awareness Month

Cybersecurity Awareness Month isn't just about checking boxes; it's about building a security-minded culture where everyone plays a part.  

Read More - 10 Ways Your Organization Can Celebrate Cyber Security Awareness Month

Security Journey News

Oct 9, 2024

AI is Supercharging Threats: Level Up Your Defenses with Security Journey

The cybersecurity landscape is evolving – fast. AI isn't just automating our lives; it's giving attackers new tools.

Read More - AI is Supercharging Threats: Level Up Your Defenses with Security Journey

Secure Coding Training

Oct 4, 2024

Kia's Web Portal Vulnerability: A Wake-Up Call for API Security

The automotive industry just got a stark reminder that "connected" doesn't just mean convenience but also a whole new world of security risks.  

Read More - Kia's Web Portal Vulnerability: A Wake-Up Call for API Security

Application Security Security Culture

Oct 2, 2024

What Engineering Leaders Need to Know About AI Security

The AI revolution is transforming software development at an unprecedented pace, bringing a new wave of security challenges. As engineering leaders, we're not just building the future; we're securing it.

Read More - What Engineering Leaders Need to Know About AI Security

Application Security Security Culture

Sep 25, 2024

The C-Suite's Guide to AI/LLM Security

C-Suite executives must understand the unique threats posed by AI and LLMs and the potential consequences of security breaches whether your team is building LLMs for AI, or using AI/LLMs tools when coding. 

Read More - The C-Suite's Guide to AI/LLM Security

Application Security Compliance & Regulations

Sep 19, 2024

The Top 5 Challenges for Security Managers in Financial Services (and How to Overcome Them)

Explore the top 5 challenges faced by security managers in the financial services industry and provide actionable tips to help them overcome these obstacles.  

Read More - The Top 5 Challenges for Security Managers in Financial Services (and How to Overcome Them)

Secure Coding Training

Sep 18, 2024

Staying Ahead of the Curve: Why Continuous Learning is Key in the AI Era

With 69% of senior executives planning to deploy generative AI for cyber defense in the next 12 months, it's clear that AI is set to revolutionize the way we protect our digital assets. 

Read More - Staying Ahead of the Curve: Why Continuous Learning is Key in the AI Era

Secure Coding Training Application Security

Sep 12, 2024

From Code Generation to Bug Detection: The AI Tools Every Developer Should Know (And How to Stay Secure)

While AI can help identify and mitigate certain risks, it cannot replace the need for human expertise and a strong security mindset.

Read More - From Code Generation to Bug Detection: The AI Tools Every Developer Should Know (And How to Stay Secure)

Application Security OWASP

Sep 10, 2024

APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets

If you're a nontechnical executive, you might not be fluent in the language of code, but you understand the language of risk. And the risks associated with API vulnerabilities are real and growing. 

Read More - APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets