Effective AppSec isn’t just about tools. It requires people with the skills and knowledge to identify vulnerabilities and implement preventative measures at every stage of the software development lifecycle (SDLC). As I’ve addressed previously, this kind of education...
The latest Cyber Threat Report from the Australian Signals Directorate (ASD), covering FY 2023, found that 34% of data breaches involved exploiting internet-facing applications. Threat actors achieved exploitation through common vulnerabilities and exposures (CVEs),...
Do you follow a holistic approach to application security (AppSec)? Or do you rely on point solutions to guide your strategy? Many organisations and their developers rely on point solutions to address AppSec. These might include Web Application Firewalls (WAF),...
Do you know how many web applications you use in one day? It’s likely more than you can keep track of off the top of your head. You might have also lost track of the amount of data shared with these applications. Most would have different levels of personally...
There’s an old adage within the developer community, known as Linus’s Law: ‘Many eyes make all bugs shallow.’ What this saying essentially refers to is the idea of collective intelligence, which leverages shared knowledge and diverse perspectives to produce new ideas...
