The OWASP Top Ten 2013 was recently released, with very minor differences from its original version in 2003. The decade-long lack of change in application security is also evidenced by organizations ...

This blog is co-authored by Matthew McCullough and is part three of a four-part series about DevSecOps. Previously, the series explored a framework for continuous security and looked at one aspect of ...

Eight in ten organizations took an application security hit during the past year tied to a vulnerability their team had already cataloged, according to a survey of 902 IT and security professionals ...

In an era where digital transformation accelerates at unprecedented rates, the security landscape presents endless opportunities and evolving threats. This frontier presents increasingly sophisticated ...

These days, every company is built on apps. That is, every company uses some kind of SaaS provider or digital application to run their organization. It’s unavoidable. This means that when we build ...

Organizations use third-party software and develop their own applications to make their business function. Such applications are often essential to operations, which means the security of those apps ...

Nearly every application has at least one vulnerability or misconfiguration that affects security and a quarter of application tests found a highly or critically severe vulnerability, a new study ...

Application security, or appsec, is the practice of using security software, hardware, techniques, best practices and procedures to protect computer applications from external security threats.

Building secure, resilient, and scalable cloud-native applications requires a new set of best practices that diverge from traditional application development. Start with these six. The emergence of ...

According to 451 Research, 64% of executives around the world — and 74% of those in the US — believe that adhering to compliance requirements is an effective way to keep data secure. This statistic is ...