Introducing The Odyssey Group
The Odyssey Group will meet every other month; the first meeting is a webinar on June 20 at 1 pm ET.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
Don't Fall for the Hacker Genius: Secure Coding is About Diligence, Not Brilliance
Many believe only brilliant minds can write secure code, but secure coding is primarily about discipline and understanding vulnerabilities. The most significant data breaches in history stemmed from preventable coding errors rather than genius hacking.
Read More
What You Need To Know About Secure Coding Training for PCI DSS v4.0 Requirements
The latest version of the Payment Card Industry Data Security Standard (PCI DSS), version 4.0, was released in March 2022. Although the requirements won't take effect until 2025, it's crucial to start preparing now.
Read More
Learn About ‘Security Journey News (4)’
Security Journey Named Visionary Company By EMA
RSA is upon us; organizations across the country (Security Journey included) are gathered in San Francisco to learn about the latest trends in application security.
(Infosecurity Magazine) Make Secure-by-Design Possible at University and Beyond
Jen Easterly, US Director of the Cybersecurity and Infrastructure Agency (CISA), recently called for universities to include security as a standard element in computer science coursework.
[SiliconANGLE] White House Publishes New National Cybersecurity Strategy
This article was written by Maria Deutscher for Silicon ANGLE. The White House has released a national cybersecurity strategy that seeks to make the digital ecosystem more resilient against hacking campaigns.
[Hackernoon] ChatGPT Will Change Cybersecurity…but How?
This article was written by John Campbell for HackerNoon. ChatGPT, OpenAI's impressive chatbot, has fueled a leap in the global understanding of the potential of artificial intelligence (AI).
[Dark Reading] 'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover
This article was written by Nate Nelson for Dark Reading. With the right kind of exploit, there's hardly any function, app, or bit of data an attacker couldn't access on your Mac, iPad, or iPhone.
[Help Net Security] Establishing Secure Habits for Software Development in 2023
This article was written by Amy Baker for Help Net Security. As a new year commences, it’s not unusual for people to take the opportunity to adopt better practices and principles and embrace new ways of thinking in both their personal and professional lives.
[DEVOPS Digest] Is the Developer the Forgotten Non-Malicious Insider Threat?
This article was written by John Campbell for DEVOPS Digest. Gartner named software supply chain attacks the second biggest threat for 2022 and predicted that 45% of organizations will have experienced one or more software supply chain attacks by 2025.
[Help Net Security] Trained Developers Get Rid Of More Vulnerabilities Than Code Scanning Tools
This article was originally written for Help Net Security. Researchers also found that as many as 70% of organizations are missing critical security steps in their software development lifecycle (SDLC), highlighting a struggle with a ‘shift-left’ approach.
[VMblog.com] Security Journey 2023 Predictions: A Greater Focus on Application Security
This article was originally written by Amy Baker for VMblog.com. Given the incredibly competitive and challenging economic environment, we are seeing a continuous investment across organizations into application development in the race to win market share.
[datanami] Feds Boost Cyber Spending as Security Threats to Data Proliferate
Originally posted by Alex Woodie from datanami. Cybercriminals are exploiting vulnerabilities in Web applications, which are up 210% over the past few years.