5 min read - Defense in depth: Protect your session cookies, and do what you can to validate their use.
hero
6 min read - Rust has great potential for writing secure code—and refactoring old code to be more secure.
5 min read - For IT: Use your MDM to find flawed phones in your fleet. For app developers: Trust, but verify.
6 min read - Be on your guard, especially if your workloads share a physical server with other tenants' code.
5 min read - Companies need to tackle vulnerabilities earlier, educate developers more, and deploy tools to automate the early discovery and remediation of flaws.
7 min read - If software is eating the world, then security—or lack thereof—is eating software. That's why you need to pay attention to the API Security Top 10.
5 min read - Defect density is not a good measure of an app sec health. Here's how my Application Security Health score can help.
5 min read - Open-source is a standard feature of software development, and it's not going away. Here's how to stay on top of the software supply chain security...
5 min read - If developers thought security was painful to deal with, wait until privacy rules become the order of the day. Are you prepared?
5 min read - As DevOps takes hold in organizations, this annual application security report has identified big changes. Here's what your team needs to know.

Pages