Making malware enemy No. 1 should be a top priority for AppSec teams. Here's why you need to shift your team's focus from vulnerabilities.
Read More about Why malware matters most: 6 ways to foil software threats faster
Verizon's Data Breach Investigations Report marked a dramatic shift in threats. Learn about it from Verizon — and how to get ahead of risk — in this Webinar.
Read More about Verizon DBIR 2024: The rise in software supply chain attacks explained
Major attacks show that commercial software is the principal attack surface. Here’s why – and how your team can mitigate its risks.
Read More about How to assess and manage commercial software risk
Get up to speed on all things cybersecurity by subscribing to these knowledge-dropping podcasts. You're welcome.
Read More about Listen up: 10 cybersecurity podcasts you can learn from
RL discovered what appeared to be a malicious downloader on PyPI. It turned out to be red teaming — but highlights a growing problem for threat detection.
Read More about Python downloader highlights noise problem in open source threat detection
Cyberthreat intelligence can bolster your SecOps with actionable info — if you choose wisely. Here's how to get started with CTI and what you need to know.
Read More about 9 best practices for leveraging threat intelligence in your security operations
The new initiative aims to help teams secure application access — and ensure continuous visibility of the workload. Experts weigh in with key insights.
Read More about NSA's zero-trust maturity for AppSec: What you need to know
Get up to speed on the state of SecOps with key takeaways from recent research and surveys of cybersecurity practitioners and leaders.
Read More about Security operations by the numbers: 30 cybersecurity stats that matter
Is application security keeping up with modern supply chain attacks? One SME urges "glass half full"-optimism. The reality: AppSec tooling needs an upgrade.
Read More about The state of AppSec: Are we getting ahead of attackers — or falling behind?
Factors are converging to make sharing of software bills of materials a reality. Here are key concerns — and why data sharing is essential to their effectiveness.
Read More about Making SBOMs actionable: Why sharing is essential
CISA has support from more than 60 companies, and it hopes more will follow. Here's what's in the pledge — and what experts say about its chances of success.
Read More about Will CISA's Secure by Design pledge be a catalyst for better software security?
With inherent threats, which are core to the system being modeled, protective measures cannot be perfect or complete. Here's how to best manage that.
Read More about When it comes to threat modeling, not all threats are created equal
The new program, which follows NIST's slowdown on the National Vulnerability Database, will enrich CVEs with contextual data for better vulnerability management.
Read More about CISA's 'vulnrichment' aims to fix the NVD
Here are the highlights that practitioners and leaders should know if they skipped last week's RSAC, the mother of all cybersecurity shows.
Read More about What you missed at RSA Conference 2024: Key trends and takeaways
In his “State of the Hack” session at RSA Conference, NSA’s David Luber said attackers are thinking beyond data theft and targeting operational technology. That's why your team needs to look deeper and longer for signs of compromise.
Read More about NSA: Nation state actors aren't after your data — they want your OT