Ryan Lockard Names the Seven Deadly Sins of DevSecOps [VIDEO]

Editor’s Note: Ryan’s story is included in “Epic Failures in DevSecOps, Volume 2”, available for free download.

“It is said in Roman Catholicism that each of the seven deadly sins is uniquely bad. Any time one of these sins are committed, we must… Continue reading Ryan Lockard Names the Seven Deadly Sins of DevSecOps [VIDEO]

Key Findings from the 2020 Cyberthreat Defense Report

The new 2020 Cyberthreat Defense Report (CDR) released this week. Now in its seventh year, the annual report provides a look at how global cybersecurity professionals perceive threats and plan to defend against them. The CDR enables cybersecurity profe… Continue reading Key Findings from the 2020 Cyberthreat Defense Report

DevOps Chats: Route Intelligence From Contrast Security

Contrast Security has released the first “Route Intelligence” functionality in the latest version of its next-generation security platform. In this DevOps Chats, we speak with Contrast’s CTO/co-founder, Jeff Williams, about what rout… Continue reading DevOps Chats: Route Intelligence From Contrast Security

Is using the JWT token to perform queries, as opposed to a raw value in its payload, considered a good practice?

For my SPA app, I’m using Firebase as the authentication provider. I’m also using this token to authenticate with my back-end server. The Firebase documentation reads:

“Warning: Do not accept plain user IDs, such as those you can get
Continue reading Is using the JWT token to perform queries, as opposed to a raw value in its payload, considered a good practice?

Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis

As a developer, you know the importance of building a robust application. With cyberattacks increasing every day, you should make sure your application is safe from the attacks and isn’t vulnerable.
To assess your application for security an… Continue reading Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis