Security Journey Blog

OWASP

Oct 29, 2024

API Security is NOT Optional: Why the OWASP API Top 10 is Your New Priority

APIs are crucial in modern software, facilitating app integrations and microservices. However, their widespread use increases the attack surface, with each endpoint posing a potential risk for exploitation and data breaches.

Read More - API Security is NOT Optional: Why the OWASP API Top 10 is Your New Priority

OWASP

Oct 24, 2024

Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI recently released a joint guide highlighting exceptionally risky software development practices that all organizations should avoid.  

Read More - Top 10 Insecure Software Development Techniques to Avoid (and What to Do Instead)

Application Security OWASP

Sep 10, 2024

APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets

If you're a nontechnical executive, you might not be fluent in the language of code, but you understand the language of risk. And the risks associated with API vulnerabilities are real and growing. 

Read More - APIs Under Attack: The C-Suite's Guide to Protecting Your Digital Assets

Secure Coding Training Application Security OWASP

Aug 29, 2024

For CISOs: Why API Security Training is Your Best Investment in 2024

The OWASP API Security Top 10 list highlights the most critical API security risks, and the recent surge in API-related breaches underscores the urgent need for proactive security measures.  

Read More - For CISOs: Why API Security Training is Your Best Investment in 2024

Secure Coding Training OWASP

Aug 23, 2024

From Zero to API Security Hero: The SJ OWASP API Top 10 Training Roadmap

In the interconnected landscape of APIs, robust security is non-negotiable to prevent devastating consequences such as data breaches, financial losses, and reputational damage. 

Read More - From Zero to API Security Hero: The SJ OWASP API Top 10 Training Roadmap

Secure Coding Training Application Security OWASP

Mar 26, 2024

AppSec Redefined: What 20 Years of Failure Has Taught Us

The application security industry faces stagnant defenses against evolving threats. The OWASP Top 10 list of critical web application security risks has remained the same for years, despite persistent patterns in data breach reports.

Read More - AppSec Redefined: What 20 Years of Failure Has Taught Us

Application Security OWASP

Dec 1, 2023

Top 10 Biggest Security Threats to Your Products

Mike Burch and his team took the time to evaluate these lists and compile what we believe is a list to rule them all – the biggest threats to our products across the different technologies. 

Read More - Top 10 Biggest Security Threats to Your Products

OWASP Diligent Developer

Sep 26, 2023

Free Security Awareness and Education Program for Cybersecurity Awareness Month

Security Journey’s Diligent Developer Program champions hands-on training in breaking and fixing code to provide the skills development teams need to code securely.

Read More - Free Security Awareness and Education Program for Cybersecurity Awareness Month

OWASP Diligent Developer

Sep 21, 2023

OWASP Top 10 Server-Side Request Forgery Explained

This article will review Server-Side Request Forgery, commonly known as SSRF, and how you can protect against SSRF attacks. 

Read More - OWASP Top 10 Server-Side Request Forgery Explained

OWASP Security Journey News Diligent Developer

Sep 18, 2023

Security Journey launches “The Diligent Developer” Limited Time Free Security Education Program

The Diligent Developer program provides product access and resources on OWASP Top 10 in support of National Coding Week.

Read More - Security Journey launches “The Diligent Developer” Limited Time Free Security Education Program

OWASP Diligent Developer

Sep 14, 2023

OWASP Top 10 Software and Integrity Failures Explained

This article will review what Software and Integrity Failures are and provide recommendations for protecting against them. 

Read More - OWASP Top 10 Software and Integrity Failures Explained

OWASP Diligent Developer

Sep 12, 2023

OWASP Top 10 Security Logging and Monitoring Failures Explained

In this article, we will review what Security Logging and Monitoring Failures are and provide recommendations for protecting against them. 

Read More - OWASP Top 10 Security Logging and Monitoring Failures Explained