In this edition of the BORNSECURE Security Influencers podcast, we talk to Nicolas Chaillan, the first US Department of Defense CISO, and the architect behind one of the most complex DevSecOps engagements in the world. During the conversation, we discuss topics such as: The reasons why Zero Trust and high permission granularity are the key […]
The OWASP Foundation just released a 2021 refresh of the Top 10 ranking, and since it has the power to bring attention to specific web development aspects and contribute to improving the quality of web software, we wanted to analyze the most significant changes. Table of contents What is the OWASP Top 10? How is […]
SonarQube, a popular open-source code quality tool that also performs security analysis, can be a great fit for most teams and we do not discourage its usage. However, it will fall short for teams that consider security an important requirement and will have to be complemented or replaced by stronger security analysis tools. Table of […]
In this edition of the BORNSECURE Security Influencers podcast we talk to Larry Maccherone, one of the most respected forces pushing for the adoption of agile methodologies and security automation. During the conversation we discuss topics such as: How Larry’s background as a developer influenced his thinking on application security, including the equivalence of a […]
Far too many software development teams, executives, and users think security is just tooling, cryptography, coding, apps, and various hardware devices. In reality, though, it’s just as much a state of mind. In short, teams have to think seriously about security culture to build truly secure software. Nowhere is this more critical than with application […]
Server Side Request Forgery, SSRF, is a serious web application risk that is on the rise due to the transition to microservices architectures, which often use web-based protocols to communicate between microservices. In short, SSRF allows abusing the vulnerable server by exploiting its privileges to access local resources, and/or as a platform to perform other […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
