OWASP Top 10 Identification and Authentication Failures
In this article, we will concentrate on Identification and Authentication Failures and provide recommendations for protecting against them.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance
Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.
Read More
What You Need To Know About Secure Coding Training for PCI DSS v4.0 Requirements
The latest version of the Payment Card Industry Data Security Standard (PCI DSS), version 4.0, was released in March 2022. Although the requirements won't take effect until 2025, it's crucial to start preparing now.
Read More
Learn About ‘OWASP (2)’
OWASP Top 10 Vulnerable and Outdated Components Explained
In this article, we will concentrate on Vulnerable and Outdated Components, provide recommendations on how to prevent the exploitation of your software, and dive into how The Diligent Developer Chronicles is a great training tool for your development team.
OWASP Top 10 Security Misconfiguration Explained
In this article, we will concentrate on Security Misconfiguration, provide recommendations on how to avoid it in your code, and break down how The Diligent Developer Chronicles is a great training tool for your development team.
OWASP Top 10 Insecure Design Explained
In this article, we will concentrate on Insecure Design and provide recommendations on how to avoid it in your code. We also suggest The Diligent Developer Chronicles as a great training tool for your development team.
OWASP Top 10 Injection Attacks Explained
In this article, we will focus on Injection Attacks and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team.
OWASP Top 10 Cryptographic Failures Explained
In this article, we will focus on Cryptographic Failures and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team.
OWASP Top 10 Broken Access Control Explained
In this article, we will focus on Broken Access Control and advise how to prevent it in your code. We also recommend The Diligent Developer Chronicles as a useful training resource for your development team.
A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles
The Diligent Developer Security Awareness and Education Program is designed to raise awareness about application security and build skills across your development team to empower them to build secure software.
How Financial Institutions Can Use The OWASP Security Model
The OWASP Maturity Model helps organizations create their own security roadmap. We'll break down the OWASP Maturity Model and walk through an example of an organization using the model to improve their application security.
Beyond the OWASP Top 10 for Companies Subject to PCI Compliance
Many customers don’t want their developers to merely retake the same material year after year. They want substantive training to enhance knowledge and skills. And, of course, many customers must provide secure coding training that fulfills PCI Requirement 6.5.