Benefits of Progressive Learning Paths for AppSec Education
Learning is a lifelong journey, no matter your age, and when educational content is built with learning science principles in mind – learning can also be effective.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance
Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.
Read More
What You Need To Know About Secure Coding Training for PCI DSS v4.0 Requirements
The latest version of the Payment Card Industry Data Security Standard (PCI DSS), version 4.0, was released in March 2022. Although the requirements won't take effect until 2025, it's crucial to start preparing now.
Read More
Learn About ‘Secure Coding Training (7)’
Explained: Executive Order on Improving the Nation's Cybersecurity
It's often said that government policies can't keep up with technology. Yet, in a time where technology evolves quickly, cybersecurity is growing in importance to stand up against increasingly...
Best AppSec Education Platform [2023]
If you are building a secure coding training program, working with experts in the field is your key to success. In doing so, you are going to research different secure coding training companies to see which is the best fit for you.
How Code Scanning Tools Are Letting You Down
Do you rely on code scanning tools to ensure your code is secure? Or do you combine code scanning tools with code reviews and secure code training? Recent research shows that code scanning tools alone may not be enough to protect against vulnerabilities.
Secure Code Training vs. Code Scanning Tools
According to the EMA research, 69.3% of organizations have SDLCs (Software Development Lifecycle) that miss critical security steps. With a growing number of vulnerabilities, organizations are looking into how they can secure their SDLC.
[Help Net Security] Trained Developers Get Rid Of More Vulnerabilities Than Code Scanning Tools
This article was originally written for Help Net Security. Researchers also found that as many as 70% of organizations are missing critical security steps in their software development lifecycle (SDLC), highlighting a struggle with a ‘shift-left’ approach.
Learning Science Principles in AppSec Education: Your Key to Success
Rolling out an employee training program requires commitment across the board. Stakeholders at all levels want to see a return on investment to justify the budget and time required by these programs.
A Look Ahead: Secure Coding Training in 2023
In the current economic climate, organizations are under increasing pressure to bring new products and services to market faster than ever. As a result, the security of those applications remains an afterthought.
Three New Lessons to Improve Password Security
Keeping user passwords secure should be a top priority for every system administrator. Stolen login credentials are one of the easiest and most common ways for cybercriminals to gain entry to systems...
Improve Your Rust Code Security Today
Rust is an extremely popular programming language, claiming the title of most loved language for seven years in a row in the annual Stack Overflow Developer Survey.
New DevSecOps Course Now Available
We’ve written a lot about the importance of DevSecOps in the software development lifecycle, including why you need it and best practices for incorporating it. Now we’ve gone beyond abstract...
Gain Practical Skills in Secure Coding and Web Application Security
We talked with Jared Ablon, President and Co-Founder at HackEDU, about the importance of engaging and customized training to develop secure coding practices and perform vulnerability assessments.