Explore Sembi IQ - The AI engine powering the next generation of intelligent quality

AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: Industry AppSec

Recent Posts

Improving Pharmaceutical Security Measures with AppSec

Pharmaceutical companies face an increased risk of data breaches due to insufficient application security. Recent research has found that the pharmaceutical industry is among the top three industries for data breaches, with the average breach cost topping $10...

Risk Management Industry AppSec

How to Use JavaScript Safely in Your Projects

Read on to learn about the risks of using JavaScript and the best practices for securely developing JavaScript projects. We’ll also cover how Kiuwan security tools can keep JavaScript projects safe.

Industry AppSec Programming Language

3 Things to Know About AppSec in Europe

The European Union has made significant upgrades to its cybersecurity framework in response to critical infrastructure threats. In order to make Europe a safe place to live and work, the Network and Information Security Directive 2 (NIS 2.0) aims to...

Industry AppSec Trends

How Holiday Hacking Puts Your Company at Risk

The holiday season brings many good things. Family, presents, decorations, joy, good cheer, peace on Earth, and so on. Unfortunately for anyone working in IT or cybersecurity, the holidays also bring something else: an increase in hacking threats and dat...

Industry AppSec Risk Management

Holiday hacking putting companies at risk graphic

Application Security for Energy Providers

In any industry, cybersecurity threats lurk around every corner. Cybersecurity breaches are costly. In 2021, the average cost of a cybersecurity data breach was $4.24 million, and can substantially damage a company’s reputation in ad...

Industry AppSec Risk Management

A Holistic Look at Cloud-Native App Security

One of the key benefits of cloud computing is that it enables organizations to accelerate applications to market more quickly, providing increased business agility. That means organizations can potentially reach the market faster than ever before, increasing ...

Industry AppSec Thought Leadership

Github Repojacking: What You Need to Know

Threat actors have been exploiting GitHub’s repojacking flaw to hijack and inject malicious code into thousands of repositories. Since this flaw has yet to be fixed, GitHub users will likely see more of these attacks soon. Luckily, there are ways to pre...

Industry AppSec Trends

Understanding the SpringShell Vulnerability in Spring Java Framework

Researchers recently announced a gaping security hole in Spring, a widely used framework for developing Java applications. Designated CVE 2022 2965 and nicknamed SpringShell, the substantial chink in the collective Java development community’s armor left many...

Industry AppSec Programming Language

PCI DSS 4.0: What It Means for Banking Organizations

On March 31, 2022, the PCI Security Standards Council (PCI SSC) released the latest version of the PCI Data Security Standard (PCI DSS), outlining technical and operational requirements for establishing security measures around payment security. It replaced a...

Industry AppSec Risk Management

PCI DSS 4.0: What It Means for Payments Organizations

On March 31, 2022, the PCI Security Standards Council (PCI SSC) released the latest version of the PCI Data Security Standard (PCI DSS), outlining technical and operations requirements for establishing security measures around payment security. It replaced a ...

Industry AppSec Risk Management

Public Sector Applications: Assessing the Risk

Unless you’ve been living under a rock, you’ve heard that cybercrime threatens small- to large-sized organizations across the globe. Not only are public sector organizations not immune, but they’re also a top target for hackers due to the volume of their prop...

Risk Management Industry AppSec

Protestware: Exploring a New Threat Vector

Since Russia invaded Ukraine, a new threat vector has circulated in the open-source community. This threat vector, known as protestware, involves activists injecting malicious content into open-source code libraries to express political opinions. While most p...

Industry AppSec Trends