AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: DevSecOps

Recent Posts

NIS2 and DORA: Introducing Two Cybersecurity Regulations

As today’s threat landscape evolves, nations must draft new frameworks and standards to address the latest cyber advancements. The updated Network and Information Security Directive (NIS2) and the Digital Operational Resilience Act (DORA) are two of the most ...

DevSecOps Industry AppSec

Introducing the cybersecurity regulations graphic

Most Organizations Faced Mobile App Security Breaches Last Year

Mobile apps have become a prime target for attackers, with Vanson Bourne reporting that almost 90% of developers experienced a breach in the past year. However, there’s still a significant gap between developers’ confidence in their security measur...

Organizations facing mobile app security breaches graphic

The Need to Defend Against Both Static and Dynamic Attacks

Every developer sets out to write bug-free code that runs as it should, meets client requirements, and doesn’t expose sensitive data. Unfortunately, time constraints, inexperience, and inattentiveness lead to releasing applications full of security vulnerabil...

DevSecOps Kiuwan Risk Management

The Need to Defend Against Both Static and Dynamic Attacks

The Best Application Security Tools

See the best application security tools to safeguard your software from vulnerabilities and cyber threats. Learn how Kiuwan can improve your security

Risk Management DevSecOps

Security strategies for ransomeware graphic

Achieving Speed and Security in Agile Development

Software development is often a game of speed. Unrealistic deadlines were one of the top work challenges developers cited in a recent Statista survey. With the tech industry moving a mile a minute, the pressure to perform can lead developers to cut corne...

DevSecOps Risk Management

What Is SCA? (Software Composition Analysis)

If you want to know what SCA is and how it can help with your development, we’ve created a guide to scanning your application.

Software Testing DevSecOps Kiuwan

What’s the Purpose of a Secure Code Review?

Twitter recently became the victim of a data breach caused by incorrect settings around an application programming interface (API). Hackers stole the information of 5.4 million users and posted it to an online forum. Threat actors then began selling the infor...

DevSecOps Programming Language Risk Management

How to Ensure Compliance with the PCI DSS Framework

About a quarter of Americans are victims of credit or debit card fraud every year. Credit card scammers are getting smarter every day and devising new tricks to obtain personal information, so the number of reports of credit card fraud goes up each year. This...

DevSecOps Industry AppSec

The OWASP Benchmark & Kiuwan

What is the OWASP Benchmark? The Open Web Application Security Project (OWASP) is best known for maintaining a list of the Top 10 security vulnerabilities in web and mobile applications. However, these aren’t the only projects the independent, non-profit orga...

DevSecOps Kiuwan

The Top 15 Open-Source Software Security Risks

We’ll walk you through some of the top open-source software security risks and discuss the tools and processes you can use to mitigate them.

Risk Management DevSecOps

Open source integration headache graphic

The ROI of Application Security: Defense Is a Business Advantage

Cybersecurity is evolving faster than ever, and the cost of a security incident continues to grow with it. IBM’s “Cost of a Data Breach Report 2023” showed that the financial impact of the average cybersecurity intrusion has risen to 4.45 mi...

DevSecOps Risk Management

17 Secure Coding Guidelines and Best Practices

One of the most important parts of software development is ensuring that your code is protected as much as possible from a wide range of threats. The number of cybersecurity breaches is going up, which is spurring many companies to raise their cybersecurity b...

Trends DevSecOps Programming Language Software Testing