Security

03

Jun

Master Dependency Management with SOOS and SAMM

• Aram Hovsepyan
• Application Security, Application Security Management, SAMM, SSDLC

Dependency management has become one of the most critical aspects of modern software development. Third-party […]

Read Article

26

May

Security metrics with purpose and strategic impact

• Aram Hovsepyan
• Application Security, Cybersecurity, Security metrics

You’ve probably heard the saying, “You can’t manage what you don’t measure.” If you are[…]

Read Article

10

Apr

Master Threat Modeling with Toreon’s World-Class Approach

• Aram Hovsepyan
• Application Security, Application Security Management, architecture mitigation, Cybersecurity, threat modeling

Threat modeling shaped my AppSec career. It helped me wrestle with one of security’s most[…]

Read Article

04

Apr

OWASP SAMM: A Comprehensive Introduction

• Nicolas Montauban
• Application Security, Application Security Management, Cybersecurity, OWASP SAMM, Security Maturity

Modern software development moves fast, and so do the security challenges that come with it.[…]

Read Article

04

Apr

How to implement OWASP SAMM: Tooling, Example and Mistakes to Avoid

• Nicolas Montauban
• Application Security, OWASP SAMM, Secure Software Development, Software security, Team Management

Understanding OWASP SAMM is only the beginning. The real value comes from using it to[…]

Read Article

24

Mar

4YFN 2025: Cybersecurity Trends

• Mahe Pereira
• 4YFN, Cryptography, Encryption, Post-quantum

As I reflect on my experience at the 4YFN conference in Barcelona, one thing stands[…]

Read Article

24

Feb

A Guide on How to Not Get Hacked

• Nicolas Montauban
• Cybersecurity, hacking, Information Security, Security

Have you every been hacked? It sucks right? But don’t worry now, let’s make sure[…]

Read Article

12

Feb

What Is the False Claims Act? A Comprehensive Guide to Understanding its Purpose and Impact

• Michaella Masters

Fraud against government programs costs taxpayers billions of dollars every year, threatening the integrity of[…]

Read Article

31

Jan

NIST 800-34 Contingency Planning: A Practical Guide to Resilience

• Nicolas Montauban
• Business Continuity, Contingency Plan, Cybersecurity, Disaster Recovery, Incident Response, nist 800-34

In today’s digital landscape, cybercrime is escalating at an alarming rate, with projected damages reaching[…]

Read Article

27

Jan

What is NIST SSDF and how should you implement it?

• Nicolas Montauban
• NIST, NIST SSDF, Security

In today’s rapidly evolving digital landscape, ensuring software security is more critical than ever. Recognizing[…]

Read Article

12

Jan

What Is CyFun and How to Implement It?

• Aram Hovsepyan
• Compliance, Cybersecurity

Introduction In this blog, we will focus on helping you understand what is Cybersecurity Fundamentals[…]

Read Article

26

Dec

How to get breached: 5 most common attack vectors

• Aram Hovsepyan
• Cybersecurity

Dear disgruntled employee (let’s call you Mallory): Tired of working long hours with no holidays,[…]

Read Article