In this edition of the BORNSECURE Security Influencers podcast we talk to Larry Maccherone, one of the most respected forces pushing for the adoption of agile methodologies and security automation. During the conversation we discuss topics such as: How Larry’s background as a developer influenced his thinking on application security, including the equivalence of a […]
Far too many software development teams, executives, and users think security is just tooling, cryptography, coding, apps, and various hardware devices. In reality, though, it’s just as much a state of mind. In short, teams have to think seriously about security culture to build truly secure software. Nowhere is this more critical than with application […]
Server Side Request Forgery, SSRF, is a serious web application risk that is on the rise due to the transition to microservices architectures, which often use web-based protocols to communicate between microservices. In short, SSRF allows abusing the vulnerable server by exploiting its privileges to access local resources, and/or as a platform to perform other […]
Last week I had the pleasure to host an interactive session with Jim Manico, one of the world leaders in application security, to discuss the importance of developers adopting secure coding standards from the very beginning of the SDLC. The goal of the session was to review some of the reasons why the reliance on […]
Sensitive data leaks are a serious risk for applications and APIs. Sensitive data includes names, addresses, credit card numbers, government-issued identification numbers, etc. Sensitive data leaks are a bad programming practice because personal data leaked by applications can be used to compromise other systems and launch targeted phishing attacks. Similarly, compliance with regulatory requirements is […]
Bad application security habits don’t merely make enterprises less secure, although they certainly do that. They drain resources, make development take far longer, and threaten a lack of compliance. Combined, this makes the application development process far more expensive and orders of magnitude less efficient. It eats into the time of people well beyond the […]
Get latest developments in web application security, DevSecOps, and cloud security from the Hdiv Security blog.
