
Learn to identify and mitigate vulnerabilities in software dependencies using OWASP's powerful open-source tool, enhancing your application's security and reducing potential risks.

Explore the OWASP Application Security Verification Standard (ASVS) project, its importance in secure software development, and practical implementation strategies.

Explore the OWASP SAMM framework for software assurance, learning key strategies to integrate security practices throughout the software development lifecycle.

Learn essential application security concepts and practices from OWASP's comprehensive curriculum, designed to enhance your skills in identifying and mitigating software vulnerabilities.

Explore the OWASP DSOMM Project, a framework for enhancing software security practices and measuring DevSecOps maturity in organizations.

Explore DefectDojo, an open-source vulnerability management tool. Learn its features, implementation, and how it streamlines security testing workflows for development teams.

Explore web application security through honeypot technology. Learn deployment strategies, data analysis, and threat intelligence gathering to enhance your cybersecurity defenses.

Explore the world of ethical hacking and its positive impact on cybersecurity with insights from Astrid Oosenbrug's keynote address on helpful hackers.

Explore supply chain security threats in development environments, focusing on vulnerabilities in Visual Studio Code extensions and their potential for remote code execution.

Explore common security flaws enabling automated attacks on applications, including retail fraud and account takeovers. Learn from real-world examples and discover effective prevention strategies.

Explore strategies for integrating security, development, and testing to prevent recurring vulnerabilities in the OWASP Top 10, fostering collaboration and cultural change for secure software development.

Explore strategies for fostering diversity in application security with insights from industry experts on inclusive practices and overcoming barriers.

Explore and exploit API vulnerabilities using vAPI, a lab environment mimicking OWASP API Top 10 scenarios. Ideal for developers and penetration testers to understand and address common API security issues.

Exploring post-DevOps challenges in AppSec, focusing on risk profiles, threat response architecture, and operational aspects to enhance security and quality in fast-paced development environments.

Retired Gen. Keith Alexander discusses national cybersecurity strategies, government-industry collaboration, and the evolving landscape of cyber threats in a conversation with Walter Isaacson.

Strategies for scaling application security through developer education, addressing the imbalance between security teams and developers and emphasizing code review for early bug detection.

Explore AppSec champions programs: research findings, best practices, and strategies for influencing developers to write secure code. Learn to implement and improve these programs in your organization.

Discover five philosophies for creating application logs that enhance breach readiness and forensic capabilities, empowering developers to build more secure and analyzable systems.

Exploring the tension between privacy and security in technology, featuring experts discussing encryption, data protection, and balancing civil liberties with law enforcement needs.

Former CIA director Petraeus and security expert Harman discuss pressing threats to national security, including ISIS, technological advancements, and challenges to American values and leadership on the global stage.

Explore evolving cyberterrorism threats and strategies for managing risks to critical infrastructure, personal data, and intellectual property in our interconnected world.