Back in 2021, Google introduced a new security standard known as the Minimum Viable Secure Product, in collaboration with other organizations. Now, 2 years later, they have updated this standard. Minimum Viable Secure Product If you are interested, you can read the original announcement from Google. However, in this post, we will focus on the […]
There will always be a natural tension between cybersecurity teams and developers. Developers are paid to create and ship new applications, while security teams are responsible for ensuring that bad things don’t happen when new software is deployed, such as data breaches or loss of business services due to vulnerabilities. While this dynamic can create […]
Public companies in the United States have been aware of the SEC tightening down on reporting security incidents for some time now. With compliance deadlines here, the reality of the situation is becoming more apparent. This piece serves as a recap and checklist for both public and private businesses on what to focus on now […]
Some days, it feels like every application and system out there is getting new functionality based on large language models (LLMs). As chatbots and other AI assistants get more and more access to data and software, it’s vital to understand the security risks involved—and prompt injections are considered the number one LLM threat. In his […]
When developing an application, you require an interface to interact with it, which can be a user interface (UI) for users to engage with your application or an application programming interface (API) for other systems to communicate with your application. Essentially, an API offers a service that provides methods and data formats for other systems […]
Any organization running software has APIs (Application programming interfaces) on their network. They serve as the connective tissue between different software applications, enabling them to seamlessly communicate and exchange data. This functionality is essential for creating integrated, feature-rich digital experiences that have become expected by users. APIs empower developers to rapidly build complex, innovative applications […]
Enterprises invest significant resources in addressing software vulnerabilities that make their way into their public-facing applications. The Consortium for Information and Software Quality estimates that the cost of poor software quality in the United States reached $2.41 trillion in 2022, which is nearly 10% of the current GDP in the US. This high cost of […]
According to Nuno, my fellow co-founder and CEO, the key to a strong AppSec program is having a clear understanding of your attack surface. You must know what needs to be protected in order to effectively safeguard it – you can’t protect something you’re not aware of. In today’s API Economy, and with the constant […]
When it comes to developing a web application, dev teams have a choice between two primary design patterns: Single-Page Applications or traditional Multi-Page Applications (MPAs). The decision on which one to use can depend on various factors, but more and more companies are opting for SPAs due to the smoother user experience they offer, potentially […]
Decoding SQL Injection: Strategies for Secure Web Applications
We hate spam, we obviously will not spam you!
Copyright © TSP 2024. All rights reserved. Designed by Enovate LLC
