Second wave of Shai-Hulud npm worm compromises the global software supply chain
DAST, IAST, SCA security testing: Deeper coverage in a single scan
The cutting-edge conundrum: Why federal agencies can’t compromise on security
AppSec best practices for security that sticks
How to avoid API blind spots in web application security testing
Common authentication and authorization vulnerabilities (and how to avoid them)
Zero trust countdown: New OMB memo stresses urgency for modern AppSec
Lessons from the Log4j crisis: Are we ready for the next global vulnerability?
What to know about Biden’s latest cybersecurity memorandum
