Explore Sembi IQ - The AI engine powering the next generation of intelligent quality

AppSec Blog

Keep up with the latest news on cybersecurity, technical trends, and programming best practices.

Category: Risk Management

Recent Posts

Cybersecurity Awareness Month: Scary Stats to Haunt Your Dev Team

It’s that time of year again — the leaves are changing, the air is getting chilly, and cybersecurity threats are lurking around every corner. That’s right, it’s Cybersecurity Month! And what better way to celebrate than by taking a look at some of the scaries...

DevSecOps Risk Management

Cybersecurity Awareness Month: Cyber Attacks on a Global Scale

IBM recently released its Cost of a Data Breach Report for 2022. It’s a helpful resource that offers IT, risk management, and security leaders insight into the year’s trends surrounding data breaches. Where they happen, how they happen, what kinds of organiza...

DevSecOps Risk Management

Cybersecurity Awareness Month: Phishing Scams & Ransomware Prevention in Europe

Since 2004, October has been recognized as Cybersecurity Awareness Month in the United States. Throughout this month, companies and IT professionals across the world should make sure that they’re rededicating themselves to cybersecurity best practic...

DevSecOps Risk Management Trends

Cybersecurity Awareness Month: Top 5 Programming Languages in 2022 and Their Risks

According to a recent report by IBM, the average data breach will cost over $4.35 million in 2022. That’s why it’s more important than ever for programmers to be aware of the risks associated with different coding languages and take steps to protect their cod...

DevSecOps Programming Language Risk Management Trends

Top programming languages and their risks blog graphic

Application Security for Energy Providers

In any industry, cybersecurity threats lurk around every corner. Cybersecurity breaches are costly. In 2021, the average cost of a cybersecurity data breach was $4.24 million, and can substantially damage a company’s reputation in ad...

Industry AppSec Risk Management

Github Repojacking: What You Need to Know

Threat actors have been exploiting GitHub’s repojacking flaw to hijack and inject malicious code into thousands of repositories. Since this flaw has yet to be fixed, GitHub users will likely see more of these attacks soon. Luckily, there are ways to pre...

DevSecOps Industry AppSec Programming Language Risk Management

Understanding the SpringShell Vulnerability in Spring Java Framework

Researchers recently announced a gaping security hole in Spring, a widely used framework for developing Java applications. Designated CVE 2022 2965 and nicknamed SpringShell, the substantial chink in the collective Java development community’s armor left many...

Risk Management

Public Sector Applications: Assessing the Risk

Unless you’ve been living under a rock, you’ve heard that cybercrime threatens small- to large-sized organizations across the globe. Not only are public sector organizations not immune, but they’re also a top target for hackers due to the volume of their prop...

Risk Management Industry AppSec

Protestware: Exploring a New Threat Vector

Since Russia invaded Ukraine, a new threat vector has circulated in the open-source community. This threat vector, known as protestware, involves activists injecting malicious content into open-source code libraries to express political opinions. While most p...

Risk Management Industry AppSec Trends

Leveraging Kiuwan to Combat ‘Not the New Normal’ Cyber Attacks

With over 700 million attempted ransomware attacks in 2021, it’s natural to assume that major cyber attacks and data breaches are the new normal, just an unavoidable side effect of life in the Fourth Industrial Revolution. However, this defeatist attitude is ...

Risk Management Kiuwan

Leveraging Kiuwan to combat cyber attacks graphic

Combining SAST and SCA Tools for Comprehensive Security

Learn how cybersecurity teams can combine SAST and SCA into a comprehensive cybersecurity strategy.

DevSecOps Programming Language Risk Management Software Testing

Do Open-Source Dependencies Cause Supply Chain Attacks?

Although Open Source Software provides many advantages, such as affordability and flexibility, the programs and their components can introduce security risks and vulnerabilities to a company.

Risk Management Industry AppSec