Security Journey Blog

Secure Coding Training Application Security

OWASP Top 10 Mini Series - SQL Injection

SQL Injection vulnerability allows attackers to alter database queries to take actions other than what the developer intended. This could allow an attacker to bypass authentication, steal data, alter site and database contents, or even destroy your database.

Read More - OWASP Top 10 Mini Series - SQL Injection

When Should I Start Secure Development Training?

I know what it is like to have competing priorities. When I was the Chief Information Security Officer at AirMap, there was a constant pressure to build product, and security was always fighting for...

Read More - When Should I Start Secure Development Training?

News and Announcements

HackEDU Two Time Award Winner

FinancesOnline, one of the most respected and reliable analytical review platforms on today’s B2B market, wrote a very positive HackEDU Security Development Training overview. We are happy to...

Read More - HackEDU Two Time Award Winner

News and Announcements

Barriers to Start Cybersecurity

The cybersecurity industry is facing a shortage of professionals, in part because of a lack of high-quality and accessible training. Cybersecurity training has several issues that make accessibility...

Read More - Barriers to Start Cybersecurity

Compliance & Regulations

How Can Compliance Lead to Better Security?

Although compliance gets companies to a minimum standard (whether it is PCI-DSS, HIPAA/HITRUST, NIST 800-53, or ISO 27001), it does not necessarily guarantee security. Unfortunately, instead of...

Read More - How Can Compliance Lead to Better Security?

Secure Coding Training

Compare Codebashing vs. HackEDU

Customers often ask us, “What is the difference between Codebashing and HackEDU?”

Read More - Compare Codebashing vs. HackEDU

Secure Coding Training

Why an Offensive Approach to Security Training is Effective

There is a saying in security that defenders have to be right 100% of the time, but attackers only have to be right once. While this may be an oversimplification, it illustrates that defenders need to understand how attackers think so they can anticipate attacks—the best defenders are those who truly understand the offense.

Read More - Why an Offensive Approach to Security Training is Effective

Secure Coding Training

How Much Should I Spend on Secure Coding Training?

Customers come to us at Security Journey and ask “How much should I spend on Secure Coding Training?” This is a very good question - we can certainly understand the need to know how much to spend for effective training.

Read More - How Much Should I Spend on Secure Coding Training?

Application Security

When Should I Launch a Bug Bounty Program?

Bug bounty programs - where individuals can receive recognition and compensation for reporting security vulnerabilities - are useful for organizations, especially when developing an application security program.

Read More - When Should I Launch a Bug Bounty Program?

Secure Coding Training

Secure Development Training Offers Innovative Approach for Fixing Vulnerable Software

30% of data breaches in 2017 took advantage of software vulnerabilities and weaknesses, costing companies on average $3.6 million per security breach. Many companies address security issues by neglecting security training or by adopting defensive-only training approaches.

Read More - Secure Development Training Offers Innovative Approach for Fixing Vulnerable Software

Secure Coding Training

Why is Secure Development Training Needed?

Read More - Why is Secure Development Training Needed?

Security Culture

How to hack your security culture

This post was written by Chris Romeo during his tenure at Security Journey.

Changing security culture appears straightforward at first glance: You tell people to do things differently than before,...

Read More - How to hack your security culture