Security Journey Blog

Application Security OWASP API

Sep 10, 2024

APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets

If you're a nontechnical executive, you might not be fluent in the language of code, but you understand the language of risk. And the risks associated with API vulnerabilities are real and growing. 

Read More - APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets

Application Security AI/LLM

Sep 5, 2024

What Your Devs Are Doing with AI and How it Impacts Your Software Security

It's essential for developers to understand the risks associated with AI tools and take proactive measures to ensure the security of their applications.

Read More - What Your Devs Are Doing with AI and How it Impacts Your Software Security

Secure Coding Training Application Security OWASP API

Aug 29, 2024

For CISOs: Why API Security Training is Your Best Investment in 2024

The OWASP API Security Top 10 list highlights the most critical API security risks, and the recent surge in API-related breaches underscores the urgent need for proactive security measures.  

Read More - For CISOs: Why API Security Training is Your Best Investment in 2024

Application Security Supply Chain

Aug 27, 2024

GiveWP Plugin Flaw Exposes the Underbelly of Software Supply Chains: Are You Prepared?

A recent vulnerability discovered in the popular GiveWP WordPress plugin (CVE-2024-5932) has sent concern throughout the WordPress community.  

Read More - GiveWP Plugin Flaw Exposes the Underbelly of Software Supply Chains: Are You Prepared?

Application Security Supply Chain

Aug 14, 2024

Mastering Software Supply Chain Security: A Deep Dive into Modern Approaches and Resources

The software you rely on is not just a product but a complex web of interconnected components, tools, and services. This intricate ecosystem, the software supply chain, is a challenge and a critical imperative for organizations of all sizes.  

Read More - Mastering Software Supply Chain Security: A Deep Dive into Modern Approaches and Resources

Secure Coding Training Application Security

Jul 2, 2024

Top 5 Challenges Facing Retail Security Managers in 2024 (& How to Overcome Them)

From e-commerce platforms to point-of-sale systems, code is the backbone of retail operations, and its vulnerabilities are prime targets for cybercriminals.  

Read More - Top 5 Challenges Facing Retail Security Managers in 2024 (& How to Overcome Them)

Secure Coding Training Application Security

May 1, 2024

Secure Coding Training Showdown: Security Journey vs. Secure Code Warrior vs. SecureFlag

This blog post will compare three leading secure coding training providers: Security Journey, Secure Code Warrior, and SecureFlag. We'll delve into their key features, user experience, support options, and ideal use cases to help you make an informed decision for your organization. 

Read More - Secure Coding Training Showdown: Security Journey vs. Secure Code Warrior vs. SecureFlag

Secure Coding Training Application Security

Apr 3, 2024

Why Low-Code/No-Code Can Be a Security Advantage

Low-Code/No-Code platforms help businesses innovate quickly. But security is a concern, as non-technical users can create vulnerable applications.

Read More - Why Low-Code/No-Code Can Be a Security Advantage

Secure Coding Training Application Security Security Culture

Mar 28, 2024

Security Journey vs. Secure Code Warrior [2024]

Choosing the right secure coding training solution for your team can be overwhelming. Security Journey can help. In this article, we compare Security Journey and Secure Code Warrior to help you choose the best option for your organization.

Read More - Security Journey vs. Secure Code Warrior [2024]

Secure Coding Training Application Security OWASP

Mar 26, 2024

AppSec Redefined: What 20 Years of Failure Has Taught Us

The application security industry faces stagnant defenses against evolving threats. The OWASP Top 10 list of critical web application security risks has remained the same for years, despite persistent patterns in data breach reports.

Read More - AppSec Redefined: What 20 Years of Failure Has Taught Us

Application Security Security Culture

Mar 14, 2024

Rewards and Risks of Using AI in Product Security

Security teams are exploring how AI-powered tools can help them address challenges when it comes to secure coding, product security, and even bridging the gap between security and development teams. 

Read More - Rewards and Risks of Using AI in Product Security

Application Security Research

Feb 6, 2024

Is Regulation the Consequence of Complacency in Securing Code?

But why is there a sudden increase in regulations, and what consequences does it have on businesses? The answer lies in the AppSec Dilemma.

Read More - Is Regulation the Consequence of Complacency in Securing Code?