How Application Security Will Change with the Rise of AI
Explore how AI transforms application security practices, from enhancing threat detection to streamlining secure design, while understanding its limitations and the continued importance of human oversight.
Developers Meet Security: Lessons Learned - Effective Communication and Training Strategies
Discover effective strategies for bridging the gap between developers and security teams, addressing communication challenges, and implementing practical security training approaches in development workflows.
Blue Team Tips for Using Scorecard in Security Automation
Discover how to leverage OpenSSF Scorecard and Allstar for automated security scanning of repositories, focusing on blue team strategies for securing first-party repos and implementing proactive security measures.
Future Use of SCAP and SBOM for Software Supply Chain Security
Explore the comparison between SCAP and SBOM methodologies for enhancing software supply chain security, understanding their features and future applications in risk management.
Japan's Industrial Sector Software Bill of Materials (SBOM) Policy
Discover Japan's approach to software supply chain security through SBOM implementation, focusing on METI's policy guidelines and strategic framework for industrial cybersecurity management.
Head First Reporting of Linux Kernel CVEs: Practical Use of the Kernel Fuzzer
Discover how to identify and report Linux kernel vulnerabilities using syzkaller fuzzer, with practical examples and step-by-step guidance on submitting findings to the Security community.
Head First Reporting of Linux Kernel CVEs - Practical Use of the Kernel Fuzzer
Discover practical techniques for finding Linux kernel vulnerabilities using syzkaller fuzzer, from initial testing to successful CVE reporting and submission to the security community.
Fundamentals of Multi-platform Frontend Development - Part 2
Master essential front-end development concepts for building cross-platform applications, covering architecture, state management, API integration, authentication, testing, and deployment strategies.
OWASP Top 10 Security Risks for LLMs - Code Examples and Mitigation Strategies
Explore real-world security risks and vulnerabilities in AI systems through entertaining code examples, focusing on OWASP Top 10 AI/ML threats and practical defense strategies.
The Hidden Risks of Software Reuse - OWASP Top 10 Open Source Software Risks
Discover the critical OWASP Top 10 Open Source Software risks through real-world examples and learn practical strategies to secure your enterprise environment while effectively managing OSS dependencies.
Application Security Posture Management (ASPM) - Navigating Beyond the Hype Cycle
Discover practical insights into Application Security Posture Management (ASPM), learning to separate hype from reality and implement effective strategies that work for your organization's needs.
AI Supply Chain Security - Inventing Backward and Forward
Explore emerging AI supply chain security threats and defensive strategies, focusing on CI/CD pipelines and creative approaches to protect AI-enabled features in modern software systems.
Integrating Security into DevOps - A Guide to Security Hygiene and Shared Accountability
Discover practical strategies for embedding security practices into DevOps workflows, promoting team accountability, and scaling information security through champion-based models.
OWASP MASVS and Mobile App Security Threats - Understanding Resilience and Reverse Engineering in 2023
Explore mobile app security threats and defense strategies through OWASP MASVS framework, focusing on reverse engineering protection and resilience guidelines for modern applications.
How AI-Powered Tools Affect Application Security Practices and Benefits
Explore how AI-powered tools are transforming application security practices, maximizing development efficiency, and accelerating product delivery timelines.
API Security - Top 10 Essential Actions in 30 Minutes per Week
Discover essential API security priorities and high-impact actions to implement in time-constrained environments, focusing on preventing data breaches with maximum efficiency.
Creating Custom Incident Response Tools - A Security Professional's Journey
Discover how creating custom incident response tools can enhance your InfoSec career through real-world experiences and practical insights into security tool development.
Modern AppSec vs. GenAI Applications - Is Your Security Program Ready?
Explore how traditional AppSec programs measure up against emerging GenAI security challenges, evaluating threat mitigation strategies and necessary program adaptations for AI-assisted development.
SBOM Shelter in the Dependency Storm - Building Resilience Brick by Brick
Discover how to build a robust Software Bill of Materials (SBOM) strategy, from implementing dependency management to automated generation in CI/CD pipelines for enhanced software supply chain security.
Cyber Resilience and Business Priorities - Understanding Barriers and Challenges
Discover critical insights into cyber resilience challenges, barriers, and operational priorities for modern organizations facing evolving IT complexities and security risks.
Building AI Agents in Ruby - From Foundations to Implementation
Discover how to build AI agents using Ruby, exploring RAG, vector embeddings, semantic search, and prompt engineering while creating a practical agent implementation in minutes.