Security Journey Blog

Secure Coding Training Security Journey News

Apr 6, 2023

(Infosecurity Magazine) Make Secure-by-Design Possible at University and Beyond

Jen Easterly, US Director of the Cybersecurity and Infrastructure Agency (CISA), recently called for universities to include security as a standard element in computer science coursework.

Read More - (Infosecurity Magazine) Make Secure-by-Design Possible at University and Beyond

Secure Coding Training Application Security Security Journey News

Mar 27, 2023

[Dark Reading] Application Security Requires More Investment in Developer Training

This article was originally published in Dark Reading.

Read More - [Dark Reading] Application Security Requires More Investment in Developer Training

Compliance & Regulations Security Journey News

Mar 2, 2023

[SiliconANGLE] White House Publishes New National Cybersecurity Strategy

This article was written by Maria Deutscher for Silicon ANGLE. The White House has released a national cybersecurity strategy that seeks to make the digital ecosystem more resilient against hacking campaigns.

Read More - [SiliconANGLE] White House Publishes New National Cybersecurity Strategy

Security Culture Security Journey News

Mar 1, 2023

[Hackernoon] ChatGPT Will Change Cybersecurity…but How?

This article was written by John Campbell for HackerNoon. ChatGPT, OpenAI's impressive chatbot, has fueled a leap in the global understanding of the potential of artificial intelligence (AI).

Read More - [Hackernoon] ChatGPT Will Change Cybersecurity…but How?

Application Security Security Journey News

Feb 24, 2023

[Dark Reading] 'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover

This article was written by Nate Nelson for Dark Reading. With the right kind of exploit, there's hardly any function, app, or bit of data an attacker couldn't access on your Mac, iPad, or iPhone.

Read More - [Dark Reading] 'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover

Security Culture Security Journey News

Feb 9, 2023

[Help Net Security] Establishing Secure Habits for Software Development in 2023

This article was written by Amy Baker for Help Net Security. As a new year commences, it’s not unusual for people to take the opportunity to adopt better practices and principles and embrace new ways of thinking in both their personal and professional lives.

Read More - [Help Net Security] Establishing Secure Habits for Software Development in 2023

Application Security Security Journey News

Jan 30, 2023

[DEVOPS Digest] Is the Developer the Forgotten Non-Malicious Insider Threat?

This article was written by John Campbell for DEVOPS Digest. Gartner named software supply chain attacks the second biggest threat for 2022 and predicted that 45% of organizations will have experienced one or more software supply chain attacks by 2025.

Read More - [DEVOPS Digest] Is the Developer the Forgotten Non-Malicious Insider Threat?

Secure Coding Training Security Journey News

Jan 23, 2023

[Help Net Security] Trained Developers Get Rid Of More Vulnerabilities Than Code Scanning Tools

This article was originally written for Help Net Security. Researchers also found that as many as 70% of organizations are missing critical security steps in their software development lifecycle (SDLC), highlighting a struggle with a ‘shift-left’ approach.

Read More - [Help Net Security] Trained Developers Get Rid Of More Vulnerabilities Than Code Scanning Tools

Application Security Security Journey News

Jan 20, 2023

[VMblog.com] Security Journey 2023 Predictions: A Greater Focus on Application Security

This article was originally written by Amy Baker for VMblog.com. Given the incredibly competitive and challenging economic environment, we are seeing a continuous investment across organizations into application development in the race to win market share.

Read More - [VMblog.com] Security Journey 2023 Predictions: A Greater Focus on Application Security

Compliance & Regulations Security Journey News

Jan 5, 2023

[datanami] Feds Boost Cyber Spending as Security Threats to Data Proliferate

Originally posted by Alex Woodie from datanami. Cybercriminals are exploiting vulnerabilities in Web applications, which are up 210% over the past few years.

Read More - [datanami] Feds Boost Cyber Spending as Security Threats to Data Proliferate

Security Culture Security Journey News

Dec 22, 2022

[Security Journal Americas] A Look at AppSec Education for 2023

This article was written by Victoria Rees for Security Journal Americas. Amy Baker, Security Education Evangelist, Security Journey discusses the trends and challenges for the software development industry in 2023.

Read More - [Security Journal Americas] A Look at AppSec Education for 2023

Security Culture Security Journey News

Dec 19, 2022

[Security Boulevard] Moving Beyond Security Awareness to Security Education

This article was written by Sue Poremba for Security Boulevard. While security awareness training is helpful to assist employees in recognizing threats, phishing and social engineering attacks are successful enough that it is clear that awareness training alone isn’t enough.

Read More - [Security Boulevard] Moving Beyond Security Awareness to Security Education