Security Journey Blog

Security Journey News

Aug 22, 2023

Security Journey Attains SOC 2 Type II Compliance Setting Industry Benchmark

Security Journey, a leading secure coding training provider, announces its achievement of SOC 2 Type II compliance, marking a significant milestone for the company and the secure coding training industry.

Read More - Security Journey Attains SOC 2 Type II Compliance Setting Industry Benchmark

Security Journey News

Aug 21, 2023

Google, Microsoft Take Refuge in Rust Language's Better Security

More tech giants are turning to the Rust programming language for its built-in memory safety and other security features.

Read More - Google, Microsoft Take Refuge in Rust Language's Better Security

Security Journey News

Aug 21, 2023

Combatting the OpenSSH Vulnerability

The recent security flaw in OpenSSH sheds light on the persistent potential for vulnerabilities in even widely-used and reviewed software.

Read More - Combatting the OpenSSH Vulnerability

OWASP Diligent Developer

Aug 17, 2023

What Are Injection Attacks & How To Avoid Them

In this article, we will focus on Injection Attacks and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team. 

Read More - What Are Injection Attacks & How To Avoid Them

OWASP Diligent Developer

Aug 15, 2023

OWASP Top Cryptographic Failures: Definition, Examples, & Solutions

In this article, we will focus on Cryptographic Failures and advise how to prevent them in your code. We also recommend The Diligent Developer Chronicles as a helpful training resource for your development team. 

Read More - OWASP Top Cryptographic Failures: Definition, Examples, & Solutions

OWASP Diligent Developer

Aug 10, 2023

OWASP Top 10 Broken Access Control Explained

In this article, we will focus on Broken Access Control and advise how to prevent it in your code. We also recommend The Diligent Developer Chronicles as a useful training resource for your development team. 

Read More - OWASP Top 10 Broken Access Control Explained

OWASP Diligent Developer

Aug 8, 2023

A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles

The Diligent Developer Security Awareness and Education Program is designed to raise awareness about application security and build skills across your development team to empower them to build secure software. 

Read More - A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles

Secure Coding Training Security Culture

Aug 3, 2023

Why It's Important to Train More Than Just Developers

The SDLC is a complex process that involves many different roles. Traditionally, application security training has focused on developers. However, in today's world, it's also important to train non-developers on application security. 

Read More - Why It's Important to Train More Than Just Developers

Secure Coding Training Security Culture

Aug 1, 2023

How Zoom Keeps Businesses Secure: A Secure Coding Training Case Study

“This [AppSec] doesn’t always come naturally to developers. It’s not that they don’t want to be more secure; they just don’t always know how,” said Robert Walker, who leads Secure Software Development at Zoom. 

Read More - How Zoom Keeps Businesses Secure: A Secure Coding Training Case Study

Security Journey News

Jul 28, 2023

The AppSec Dilemma: Investing in Education Amidst Mass Tech Layoffs

This article was originally published on Solutions Review. From mass redundancies at Big Tech firms like Google, Meta, and Microsoft, to reducing teams in SMEs and small fintech startups, layoffs are impacting thousands of tech and cybersecurity workers. 

Read More - The AppSec Dilemma: Investing in Education Amidst Mass Tech Layoffs

Security Journey News

Jul 28, 2023

White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

This article was originally published on CPO Magazine. The much-anticipated implementation plan for the Biden administration’s National Cybersecurity Strategy was released late last week and a flurry of work in updating and improvement is now expected, particularly at federal civilian agencies that maintain legacy systems.

Read More - White House Cybersecurity Strategy Implementation Plan Released: 65 Mandatory Initiatives, Increased Public-Private Partnerships

Security Journey News

Jul 28, 2023

How Developers Can Work With Generative AI Securely

This article was originally written by John Campbell and published on DZone. Four tips to help the SDLC strike a balance between the improved productivity that generative AI brings and the risks it poses to code security.

Read More - How Developers Can Work With Generative AI Securely