Original Post: What’s Different About Data Security in the Cloud? Almost Everything. In the wake of the Covid-19 pandemic, organizations accelerated their digital transformation plans, shifting from complex legacy systems to agile cloud environments. This… Read More »Unpacking Cloud Data Security: Why It’s a Whole New Ballgame

Original Post: Identification, Authentication and Kenny Loggins and Logouts: What I’ve Learned On My Journey Into Application Security | by Jen Cracchiola | Aug, 2024 The article discusses the basics of identification and authentication, using… Read More »Securing the Digital Frontier: Lessons from Jen Cracchiola’s Journey Through Application Security

Original Post: The journey to AppSec gold: Lessons we can learn from the Olympians The content draws parallels between the dedication and perseverance required of Olympic athletes and the consistent effort necessary to succeed in… Read More »Striving for AppSec Excellence: Olympic-Level Insights into Application Security

Original Post: Certified Application Security Testing Specialist: Why You Should Get CASTS Certified | by M. Rahman | Aug, 2024 The article discusses the Certified Application Security Testing Specialist (CASTS) certification course offered by Tonex.… Read More »Boost Your Career: The Benefits of CASTS Certification

Original Post: Don’t rely on Automated Penetration Testing. | by Mauricio Giraldo | Aug, 2024 The article discusses the increasing reliance on automation by companies for various operations, including security processes such as vulnerability scans… Read More »Why Automated Penetration Testing Falls Short: Insights by Mauricio Giraldo

Original Post: Vulnerabilities in NodeJS C/C++ add-on extensions The research aims to explore C/C++ vulnerabilities in NodeJS npm packages, focusing on common issues like Buffer Overflow, Denial of Service (DoS), and Memory Leakages within NodeJS… Read More »Addressing Security Risks in NodeJS C/C++ Add-on Extensions

Original Post: Intro to AppSecTDD. Considerations: All my examples will be… | by Mauricio Giraldo | Aug, 2024 The article explores how to integrate security into Test-Driven Development (TDD), creating a methodology dubbed Application Security… Read More »

"A Beginner’s Guide to AppSecTDD: Foundational Concepts with Practical Examples"

Original Post: InCyber Forum Europe recap: 4 tips from DevSecOps experts The article discusses how organizations can adopt DevSecOps by shifting security left and fostering shared responsibility for security issues. Tips from experts Grace Law,… Read More »Top 4 DevSecOps Insights from the InCyber Forum Europe Recap

Original Post: GraphQL Vulnerabilities and Common Attacks: Seen in the Wild This blog delves into recent real-world examples of GraphQL attacks, building upon their previous overview of GraphQL security. It emphasizes a need for basic… Read More »Real-World GraphQL Security Threats and Attack Strategies

Original Post: How to measure the effectivenss of your application security program ? | by Prasanna S Karthikeyan | Aug, 2024 The article delves into key metrics for evaluating and enhancing application security programs. The… Read More »Measuring the Impact of Your Application Security: A Comprehensive Guide by Prasanna S Karthikeyan