The explosion of open source software consumption, combined with the increasing backlog of critical vulnerabilities and the rise of outside threats, paints an alarming picture of the current state of software supply chain security ...

If you're building in the cloud, you're building with APIs. And if you're building with APIs, you need to be thinking about API gateways. In today's interconnected digital landscape, APIs serve as the crucial bridges that facilitate communication and data exchange between various software applications and services. As organizations increasingly adopt cloud-native architectures and microservices, the number and complexity of APIs continue to grow, creating a new set of security challenges. This is where API gateways step in, offering a powerful solution to manage and secure the API ecosystem ...

DevSecOps experts offer thoughtful, insightful, and often controversial predictions on how DevSecOps and related risks and tools will evolve in 2025. Part 4, the final installment of DevSecOps predictions, covers DevSecOps solutions ...

DevSecOps experts offer thoughtful, insightful, and often controversial predictions on how DevSecOps and related risks and tools will evolve in 2025. Part 2 covers application security risks ...

In Episode 91 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler present 2025 cybersecurity predictions and trends ...

In Episode 89 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss the data generated by free applications and how technological advances are impacting individual privacy ...

I've loved witnessing CISA's Secure-By-Design (SBD) movement gain momentum worldwide, as the United States, Australia, New Zealand, Canada, Singapore, Japan, Germany, and the UK commit to integrating similar guidelines and expectations into their respective cybersecurity strategies — with many of these nations also contributing to the original US recommendations.

As we approach 2025, the cyber security landscape will be shaped by the rise of AI-powered attacks, the looming threat of quantum computing, and the growing vulnerability of social media platforms. Part 2 continues the predictions ...

The escalating complexity of software supply chains and the applications being built is shifting greater security responsibilities onto developers. This shift is driving up costs and workload, threatening developer productivity and the overall quality of applications. Left unchecked, these pressures can jeopardize the very security that DevSecOps aims to enhance ...

Agile security sprints are specialized iterations within the Agile framework focused on embedding security into the sprint cycle. Rather than treating security as an afterthought or a final checkpoint, it's integrated into the regular sprint rhythm ...

In Episode 86 of the Cybersecurity Awesomeness Podcast, Chris Steffen and Ken Buckler from EMA discuss real-world cybersecurity AI use cases ...