Developers and Application Security - Who is Responsible?
Explore findings on security responsibilities in software development, discussing implications of IoT and open-source components in everyday devices and applications.
Start Writing Security Tests Now
Automate security testing in your application using frameworks to eliminate common vulnerabilities and streamline pentesting, focusing on complex security issues.
Real World Serverless - Architecture, Patterns and Lessons Learned
Explore serverless architecture patterns, real-world challenges, and best practices for complex AWS applications. Learn about testing, debugging, monitoring, and securing serverless systems while addressing common misconceptions.
Application Security in the Age of Open Source
Explore open source software's impact on application security, including its benefits, risks, and best practices for protecting organizations against vulnerabilities and compliance issues.
10 Things Developers Need to Know About Web Application Security
Explore 10 crucial web application security practices for developers, focusing on in-depth insights to make security engaging and integral to project development.
Common Vulnerabilities You Wish Your Java App Didn't Have
Explore and learn to defend against prevalent Java vulnerabilities through real-world examples and practical code solutions for enhanced application security.
One Does Not Simply Add MFA
Explore MFA implementation best practices, security pitfalls, and real-world scenarios. Learn to protect users and systems effectively, covering authentication methods, password security, and user-friendly MFA integration.
Dirty Bin Cache - A New Code Injection Poisoning Binary Translation Cache
Uncover a novel code injection vulnerability in Rosetta 2, exploring its impact on Apple Silicon Macs and discussing potential security implications for binary translation caches.
What Is Linux Kernel Keystore and Why You Should Use It in Your Next Application
Explore Linux Kernel Keystore's secure credential management for applications, integrating with security hardware and protecting secrets from memory vulnerabilities in cloud environments.
What You'll Miss on AWS and How To Find It
Discover key AWS migration challenges and solutions for PHP developers, covering auto-scaling, load balancing, databases, and more, to ensure a smooth transition to cloud infrastructure.
Dip Your Toes in the Sea of Security
Explore essential web application security concepts, from secure PHP coding practices to Linux server protection, providing insights for developers of all levels.
In the World of Password123, Be Someone's #@%^)*!
Explore modern authentication methods, including multi-factor authentication, single sign-on, and federated authentication. Learn about OAuth and OIDC to enhance application security.
How AI is Impacting Cybersecurity - Does It?
Explore AI's impact on cybersecurity, including its use in threat detection, potential risks, and ethical considerations. Gain insights on AI security practices and mitigation strategies.
Speed and Scale - How to Get There
Explore high-velocity software delivery through innovation, data-driven decisions, agile development, and cloud-native architectures. Learn strategies for migrating to microservices and NoSQL databases for improved scalability and speed.
Web Platform - The Secure Parts
Explore secure client-side web development techniques with Google Chrome developer advocate Mike West. Learn to leverage the right parts of web specifications for robust application security.
The Application Security State of the Union
Explore the current and future landscape of AppSec, including threats, vulnerabilities, tools, and strategies. Gain insights to build robust security programs and prepare for emerging challenges.
From the OWASP Top Ten to the OWASP ASVS
Comprehensive overview of OWASP security standards, comparing Top Ten lists to the more detailed ASVS. Explores the evolution of web application security practices and provides insights for developers and testers.
Building Layers of Defense with Spring Security
Comprehensive guide to implementing multi-layered security in Spring applications, covering authentication, authorization, protection against common web vulnerabilities, and custom security configurations.
Royal Testing - Purple Teaming to Build & Secure Applications Better
Explore purple teaming for better application security. Learn to understand flaws, attacks, and defense strategies. Gain insights on effective monitoring and testing techniques.
Taking Security Seriously
Explore real-world security challenges, underlying problems, and actionable advice for building secure software. Learn from breaches and vulnerabilities to improve application security practices.
AppSec - From the OWASP Top Ten to the OWASP ASVS
Comprehensive overview of application security standards, comparing OWASP Top Ten to the more detailed ASVS, providing developers with in-depth guidance for secure software development.