4 Examples of Security Champion Activities
This article will review four activities for security champions to complete within their organization.
Security Journey Blog
Here you’ll find the latest news, information, and trends in application security and compliance, plus tips and strategies for writing safer code and building a security culture.
Stay Up-to-Date on all Security Journey news and events.
Featured Articles
A New Way to Train on OWASP Top 10: The Diligent Developer Chronicles
The Diligent Developer Security Awareness and Education Program is designed to raise awareness about application security and build skills across your development team to empower them to build secure software.
Read More
Security Journey accelerated secure coding training platform enhancements to drive development team engagement and application security knowledge gain
Enhanced tournaments and over 800 lessons across more than 40 languages, frameworks, and technologies to drive up to 85% knowledge gain
Read More
Learn About ‘Application Security’
What are the 3 Pillars of Application Security?
In order to protect your organization's applications from attack, it is essential to have a strong foundation in the three pillars of application security: process, technology, and people.
Embedded Software Security for Medical Devices
As medical technology advances, medical devices become increasingly complex and often rely on embedded software to function.
Managing Human Risk For Safer Applications
An organization can instill as many safeguards and protocols as they want. However, there is still a variable that is hard to account for when it comes to application security – humans.
Feeling Exhausted? The AppSec Dilemma Could Be to Blame
From the growing number of vulnerabilities to the increasing pressure to release apps quicker, security and development teams must join forces to create secure applications.
Bridging the Security and Development Divide
It's time to bridge the divide between security and development teams to create a more productive software development lifecycle.
Patch Tuesday: March 2023
Following March’s Patch Tuesday updates, it’s important that we don’t forget equally critical patches released earlier in the month.
What is Application Security Training?
Does your organization have application security training? Considering that 95% of data breaches last year were on web apps, now may be the time to invest in comprehensive training that can be applied to everyone within your SDLC.
What The National Cyber Strategy Means For You [2023]
The new National Cyber Strategy from the Biden administration aims to strengthen the nation's cybersecurity and protect against cyber threats. The strategy emphasizes cybersecurity more, with increased regulation, collaboration, and funding for cybersecurity initiatives.
[Dark Reading] 'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover
This article was written by Nate Nelson for Dark Reading. With the right kind of exploit, there's hardly any function, app, or bit of data an attacker couldn't access on your Mac, iPad, or iPhone.
[DEVOPS Digest] Is the Developer the Forgotten Non-Malicious Insider Threat?
This article was written by John Campbell for DEVOPS Digest. Gartner named software supply chain attacks the second biggest threat for 2022 and predicted that 45% of organizations will have experienced one or more software supply chain attacks by 2025.