GiveWP Plugin Flaw Exposes the Underbelly of Software Supply Chains: Are You Prepared?
A recent vulnerability discovered in the popular GiveWP WordPress plugin (CVE-2024-5932) has sent concern throughout the WordPress community.
Featured Articles
EU AI Act AI Literacy Requirements: What Organizations Need to Know
Artificial intelligence has quickly moved from an emerging technology to an everyday business tool. Employees across...
5 Types of Data You Should NEVER Share with AI
Large language models (LLMs) like ChatGPT are powerful tools, but it's crucial to remember that data privacy is paramount.
Read More
From Zero to API Security Hero: The SJ OWASP API Top 10 Training Roadmap
In the interconnected landscape of APIs, robust security is non-negotiable to prevent devastating consequences such as data breaches, financial losses, and reputational damage.
Secure Your Software's Foundation: Supply Chain Security Training from Security Journey
The supply chain now extends to the digital realm, posing threats to the code that powers our digital world. Developers have a significant responsibility in safeguarding this digital supply chain.
Empower Your Developers, Secure Your APIs: Free OWASP Top 10 Training
The digital world thrives on APIs, the connectors that power seamless interactions between applications and services. But with great connectivity comes great responsibility – and significant security...
Mastering Software Supply Chain Security: A Deep Dive into Modern Approaches and Resources
The software you rely on is not just a product but a complex web of interconnected components, tools, and services. This intricate ecosystem, the software supply chain, is a challenge and a critical imperative for organizations of all sizes.
The Evolving Finance Threat Landscape: Why Continuous Security Training is Non-Negotiable
Data breaches, ransomware attacks, and phishing scams are no longer isolated incidents; they are a persistent and evolving threat. The stakes are continually rising, and the cost of failure is immense.
Beyond Compliance: Polyfill.io Cyber Attack Underscores Critical Need for Secure Coding Training
The attack underscores the urgent need for a shift in mindset from compliance-focused security to a proactive approach that prioritizes secure coding practices.
Your PCI DSS Requirement 6 Solution: Secure Coding Training by Security Journey
Requirement 6 of PCI DSS focuses on developing and maintaining secure systems and applications. Failing to implement secure coding practices can introduce vulnerabilities that expose your organization to data breaches and hefty fines.
Security Journey Continues to Strengthen World-Class Secure Coding Platform with Appointment of New CEO
PITTSBURGH, July 31, 2024 — Security Journey, the education and training platform to help software developers code more securely, today announced Dan Newton as the organization’s new CEO. Newton...
Security Journey Celebrates Disability Independence Day: Making Secure Coding Accessible to All
On July 26th, we celebrate Disability Independence Day, marking the 34th anniversary of signing the Americans with Disabilities Act (ADA). This landmark legislation prohibits discrimination against...
You Spoke, We Listened: Shorter, Sharper Security Quizzes
Security Journey is committed to delivering engaging, impactful learning experiences that benefit your software development work. We actively seek feedback from thousands of users, and your input shapes our platform's evolution.
Security Journey vs. Secure Code Warrior: Which is Right for Your Retail Business?
One crucial aspect of safeguarding your retail business is ensuring that your applications and systems are built with security in mind from the ground up. This is where secure coding training comes in.