The current version of the Hdiv platform includes an integration with Secure Code Warrior microeducation content. This means that developers can easily access some of the best educational content to learn how to fix security vulnerabilities in no time. The content, in the form of short practical videos, is accessible from everywhere the vulnerability details […]
A remote code execution (RCE) vulnerability in the highly popular Java logging library log4j is taking the world by storm. It will likely be the most talked about vulnerability of the year 2021, due to the widespread presence of this open-source library. Networks are already reporting a large spike in the number of exploit attempts […]
Today, we bring you our latest collaboration with the OWASP Orange County chapter, where Daniel Blazquez, our Technical Product Marketing Lead, presented a talk on “The beauty of runtime AppSec done right”. In this talk, we looked at how AppSec practices seem to waver between static and runtime activities. Static activities such as code scans […]
Today, we are excited to announce a strategic partnership with Snyk, the leader in developer security. Our goal with this partnership is to combine our runtime analysis with Snyk’s static analysis capabilities, which include the best proprietary vulnerability database. The modern Software Development Lifecycle (SDLC) is becoming more and more complex, driven by the acceleration […]
In this edition of the BORNSECURE Security Influencers podcast, we talk to Nicolas Chaillan, the first US Department of Defense CISO, and the architect behind one of the most complex DevSecOps engagements in the world. During the conversation, we discuss topics such as: The reasons why Zero Trust and high permission granularity are the key […]
The OWASP Foundation just released a 2021 refresh of the Top 10 ranking, and since it has the power to bring attention to specific web development aspects and contribute to improving the quality of web software, we wanted to analyze the most significant changes. Table of contents What is the OWASP Top 10? How is […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
