01
DecThe upcoming Cyber Resilience Act (CRA) is a EU regulation that was published on November […]
27
NovThe warning shots are over. The NIS 2 Directive is live, and enforcement has begun.[…]
25
NovAs software systems grow more complex, proving that they are secure has become as important[…]
31
OctMost organizations conduct security assessments, yet few turn them into meaningful improvement. Traditional cybersecurity gap[…]
24
OctAutomated Application Security Testing (AAST) refers to the use of software tools to identify vulnerabilities[…]
16
OctMany organizations treat Common Vulnerabilities and Exposures (CVEs) as first-class citizens. Some even enforce strict[…]
24
SepDevelopers are under pressure to deliver fast, but often without the tools to build securely.[…]
20
SepApplication security (AppSec) remains one of the toughest challenges modern organizations are facing. Despite heavy[…]
28
AugFinding vulnerabilities is not the hard part anymore. Every build and every pipeline produces a[…]
06
AugBy embracing the Japanese Kaizen philosophy of continuous incremental improvement, your AppSec program can evolve[…]
30
JulYour DevSecOps pipeline is fast, automated, and built to scale. But is security truly integrated,[…]
29
JulAbout 4 years ago I have joined the OWASP Software Assurance Maturity Model (SAMM) project[…]