How Application Security Will Change with the Rise of AI
Explore how AI transforms application security practices, from enhancing threat detection to streamlining secure design, while understanding its limitations and the continued importance of human oversight.
Developers Meet Security: Lessons Learned - Effective Communication and Training Strategies
Discover effective strategies for bridging the gap between developers and security teams, addressing communication challenges, and implementing practical security training approaches in development workflows.
Forging the Future of a More Secure AI - How CoSAI Intends to Help
Discover how leading tech companies collaborate through CoSAI to establish security standards, best practices, and governance frameworks for AI systems, focusing on supply chain security and cybersecurity preparedness.
Blue Team Tips for Using Scorecard in Security Automation
Discover how to leverage OpenSSF Scorecard and Allstar for automated security scanning of repositories, focusing on blue team strategies for securing first-party repos and implementing proactive security measures.
Future Use of SCAP and SBOM for Software Supply Chain Security
Explore the comparison between SCAP and SBOM methodologies for enhancing software supply chain security, understanding their features and future applications in risk management.
Linux Distributor's Role for Supply Chain Security
Explore how Linux distributions can enhance software supply chain security through centralized access, trusted SBOM delivery, and improved vulnerability management mechanisms.
Japan's Industrial Sector Software Bill of Materials (SBOM) Policy
Discover Japan's approach to software supply chain security through SBOM implementation, focusing on METI's policy guidelines and strategic framework for industrial cybersecurity management.
Head First Reporting of Linux Kernel CVEs: Practical Use of the Kernel Fuzzer
Discover how to identify and report Linux kernel vulnerabilities using syzkaller fuzzer, with practical examples and step-by-step guidance on submitting findings to the Security community.
Head First Reporting of Linux Kernel CVEs - Practical Use of the Kernel Fuzzer
Discover practical techniques for finding Linux kernel vulnerabilities using syzkaller fuzzer, from initial testing to successful CVE reporting and submission to the security community.
Effective Threat Modeling for Better Software Security
Discover essential threat modeling methodologies and tools to enhance software security throughout the development lifecycle, with practical insights from Thales' proven practices.
Application Security and AI: Tools, Frameworks, and Implementation Techniques
Explore the intersection of AppSec and AI through practical tools, frameworks, and prompt engineering techniques for enhanced security implementation.
Fortifying the Startup Supply Chain: Secure and Cost-Effective Strategies That Won't Break the Bank
Discover cost-effective strategies and open-source tools to secure your startup's supply chain, build customer trust, and maintain business continuity while working with limited security resources.
Maturing Your Application Security Program - A Practical Guide to Next Steps
Discover practical steps to advance your AppSec program through three maturity levels, with actionable strategies for immediate security posture improvements based on experience with 300+ companies.
OWASP Top 10 Security Risks for LLMs - Code Examples and Mitigation Strategies
Explore real-world security risks and vulnerabilities in AI systems through entertaining code examples, focusing on OWASP Top 10 AI/ML threats and practical defense strategies.
CVSS v4 - Understanding Vulnerability Scoring and Risk Management
Explore CVSS v4's evolution, implementation challenges, and its crucial role in vulnerability risk management, focusing on practical optimization strategies and future developments in cybersecurity.
AWS Account Security Best Practices - A DIY Guide
Learn essential AWS security practices and cost-effective strategies to protect your cloud infrastructure without relying on expensive consultants. Gain practical insights for small and medium businesses.
The Hidden Risks of Software Reuse - OWASP Top 10 Open Source Software Risks
Discover the critical OWASP Top 10 Open Source Software risks through real-world examples and learn practical strategies to secure your enterprise environment while effectively managing OSS dependencies.
Hacking AI - Exploring OWASP ML and LLM Top 10 Security Threats
Explore critical security threats in machine learning and large language models through OWASP's ML Top 10 and LLM Top 10 frameworks for enhanced AI security awareness.
Application Security Posture Management (ASPM) - Navigating Beyond the Hype Cycle
Discover practical insights into Application Security Posture Management (ASPM), learning to separate hype from reality and implement effective strategies that work for your organization's needs.
AI Supply Chain Security - Inventing Backward and Forward
Explore emerging AI supply chain security threats and defensive strategies, focusing on CI/CD pipelines and creative approaches to protect AI-enabled features in modern software systems.
Hacker Numerology - Understanding System Security Through Number Analysis
Explore the fascinating relationship between numbers and system security, learning to deduce security properties through identifier pattern analysis and observation.