Security Journey Blog

Security Culture Security Journey News

Dec 22, 2022

[Security Journal Americas] A Look at AppSec Education for 2023

This article was written by Victoria Rees for Security Journal Americas. Amy Baker, Security Education Evangelist, Security Journey discusses the trends and challenges for the software development industry in 2023.

Read More - [Security Journal Americas] A Look at AppSec Education for 2023

Security Culture Security Journey News

Dec 19, 2022

[Security Boulevard] Moving Beyond Security Awareness to Security Education

This article was written by Sue Poremba for Security Boulevard. While security awareness training is helpful to assist employees in recognizing threats, phishing and social engineering attacks are successful enough that it is clear that awareness training alone isn’t enough.

Read More - [Security Boulevard] Moving Beyond Security Awareness to Security Education

Application Security Security Journey News

Nov 23, 2022

[Reversing Labs] GitHub Repojacking Attack: 10 Lessons for Software Teams

This article was written by John P. Mello Jr. for Reversing Labs. Software supply chain attacks are on the rise because of their reach. Here are 10 valuable lessons from the recent GitHub namespace attack.

Read More - [Reversing Labs] GitHub Repojacking Attack: 10 Lessons for Software Teams

Security Culture Security Journey News

Oct 31, 2022

[Dark Reading] Does Security Have to Get Worse Before It Gets Better?

This article was written by Amy Baker for Dark Reading. How to solve the software vulnerability problem across the entire SDLC.

Read More - [Dark Reading] Does Security Have to Get Worse Before It Gets Better?

Security Culture Security Journey News

Oct 25, 2022

[Dark Reading] Security Leaders are Calling for Industry to Take Action and Programmatically Improve Secure Coding Education

This article was posted on Dark Reading. Currently, none of the top 50 undergraduate computer science programs in the U.S. require a course in code or application security.

Read More - [Dark Reading] Security Leaders are Calling for Industry to Take Action and Programmatically Improve Secure Coding Education

Compliance & Regulations Security Journey News

Sep 16, 2022

[Security Week] Industry Reactions to Govt Requiring Security Guarantees From Software Vendors

This article was written by Eduard Kovacs for Security Week. The White House has announced new guidance with the aim of ensuring that federal agencies only use secure software.

Read More - [Security Week] Industry Reactions to Govt Requiring Security Guarantees From Software Vendors

Security Culture Security Journey News

Sep 2, 2022

[Dark Reading] Feds, npm Issue Supply Chain Security Guidance to Avert Another SolarWinds

This article was originally posted on Dark Reading. The US government and the Open Source Security Foundation have released guidance to shore up software supply chain security, and now it's up to developers to act.

Read More - [Dark Reading] Feds, npm Issue Supply Chain Security Guidance to Avert Another SolarWinds