AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: DevSecOps

Recent Posts

How to Prevent Threats in Healthcare Application Security

Healthcare Sector Application Security: Preventing Threats from Becoming Attacks Software security isn’t a state of being, or even a single action; it is a process, and one that requires more than just hardening your software. The year 2020 saw a dramati...

Preventing threats in Healthcare security graphic

7 Database Security Principles and Practices

Databases are some of the most valuable sources of data for organizations of any type, from healthcare to online retailers. In turn, they’re also some of the highest-value targets for attackers and a trove full of personnel information, financial data, and in...

DevSecOps Programming Language

Database security principles and practices graphic

Mitigating Security Threats in Online and Mobile Gaming

In this time of the COVID-19 pandemic, we’re all spending more time on our PCs and smartphones. It might seem odd, but The Business Research Company’s Global Online Gambling Market report asserts that online gambling has skyrocketed in 2020. This is...

DevSecOps Industry AppSec

Virtual CISO: Leveraging External Security Expertise

Today’s organizations, both big and small, are finding that security activities consume more resources than ever before. Cyber criminals are getting better all the time, and staying just one step ahead of them is getting harder. But it’s not just more sophist...

DevSecOps Integrations

Secure Remote Access: Keeping Employees and the Organization Safe

In this age of lockdowns, social distancing and working from home, organizations must think carefully about how to extend their networks and services across the internet and into employees’ and contractors’ homes. This makes remote access security management ...

DevSecOps Industry AppSec Risk Management

6 Threats to Development Team Productivity

Time to market is a make-or-break proposition for many development teams. A first-mover advantage can provide a competitive edge that can last for years, if not decades. However, speed isn’t the only priority when delivering software. Code needs to be high-qu...

DevSecOps

Rethinking Application Security in a Post-Pandemic World

Without a doubt, the COVID-19 pandemic has had a massive impact on the financial services landscape. Not only did businesses have to tweak their entire operations under safety regulations, but they also had to contend with a growing list of cybersecurity thre...

DevSecOps Industry AppSec

8 Common Cybersecurity Vulnerabilities in Enterprise Software

Cybersecurity is getting a lot of attention, from the break room to the board room. Few weeks pass without another salacious story in the media about a new large-scale data breach, ransomware outbreak or other attack designed to disrupt normal life. Cyb...

DevSecOps Industry AppSec

Vulnerabilities in enterprise software blog graphic

5 Essential App Security Analytics

Knowing which app security analytics to track will help your team be more efficient and proactive in stopping potential security threats.

DevSecOps Industry AppSec

The Role of SAST in DevSecOps

Investments in artificial intelligence are predicted to reach $200 billion by 2025, fueled by predictions that advancements in generative AI and machine learning will result in massive productivity gains. Unfortunately, this bright future has a dark side as w...

DevSecOps Software Testing

How OpenSSF Collaborates on Open-Source Security

Open source software is essential to application development, particularly for the web. At the same time, it also represents a key source of application vulnerabilities. To help make open source software more secure, the Linux Foundation has announced a cross...

DevSecOps Programming Language

OpenSSF collaborates on Open-source security graphic

Understanding Cyber Threat Intelligence (CTI)

Simply put, threat intelligence – also known as cyber threat intelligence, or CTI – is information that is collected, analyzed, organized, and refined to provide insight, input, and advice about potential and current security threats or attacks that could pos...

DevSecOps