01
DecThe upcoming Cyber Resilience Act (CRA) is a EU regulation that was published on November […]
27
NovThe warning shots are over. The NIS 2 Directive is live, and enforcement has begun.[…]
25
NovAs software systems grow more complex, proving that they are secure has become as important[…]
31
OctMost organizations conduct security assessments, yet few turn them into meaningful improvement. Traditional cybersecurity gap[…]
16
OctMany organizations treat Common Vulnerabilities and Exposures (CVEs) as first-class citizens. Some even enforce strict[…]
24
SepDevelopers are under pressure to deliver fast, but often without the tools to build securely.[…]
06
AugBy embracing the Japanese Kaizen philosophy of continuous incremental improvement, your AppSec program can evolve[…]
30
JulYour DevSecOps pipeline is fast, automated, and built to scale. But is security truly integrated,[…]
10
JulThis article contains a variety of different cybersecurity statistics and trends of 2025 and recent[…]
11
JunMost security issues in software stem from one simple problem: teams try to fix them[…]
26
MayYou’ve probably heard the saying, “You can’t manage what you don’t measure.” If you are[…]
10
AprThreat modeling shaped my AppSec career. It helped me wrestle with one of security’s most[…]