Skip to content

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    Contrast research: December saw deserialization application attacks surge.

    Silent but deadly: December sees deserialization attacks surge despite overall lull in app attacks

    Attacks on individual applications were down month to month in December 2024, but one of the most dangerous types of..

    The most important things to know about ADR

    12 things to know about ADR

    The Application Security (AppSec) landscape is changing fast. With recent high-profile breaches and a wave of new..

    Unpacking the SEC cybersecurity reporting rules: Enhance compliance efforts and reduce risk with ADR

    Unpacking the SEC cybersecurity reporting rules: Enhance compliance efforts and reduce risk with ADR

    Research shows that the majority of companies filing cybersecurity reports are doing so twice as long after an incident..

    Cybersecurity Insights with Contrast CISO David Lindner | 01/10/25

    Cybersecurity Insights with Contrast CISO David Lindner | 01/10/25

    Insight No. 1: Lawyer up, CISOs! A recent report found that 70% of CISOs have gotten cold feet about the job, given..

    Experts: Why the Log4Shell Grinch is still hanging around

    Experts: Why the Log4Shell Grinch is still hanging around

    Three years ago, Log4Shell was the worst holiday gift ever for security teams, particularly given that it was wrapped..

    Cybersecurity Insights with Contrast CISO David Lindner | 12/20/24

    Cybersecurity Insights with Contrast CISO David Lindner | 12/20/24

    Insight No. 1: Forget the hype. Cloud security is a battlefield, and you're woefully unprepared. Let's cut the crap...

    Contrast's customer security advisors serve as strategic partners who guide and support your AppSec journey.

    We built it. Now we'll run it for you.

    As a Contrast Security customer you already have the best-in-class security platform for applications and application..

    Log4Shell: Three years later & Log4j is still burning down the house

    Log4Shell: Three years later & Log4j is still burning down the house

    Three years ago this month, the security world found out about a massive vulnerability in the Log4j library. Log4Shell..

    Cybersecurity Insights with Contrast CISO David Lindner | 12/13/24

    Cybersecurity Insights with Contrast CISO David Lindner | 12/13/24

    Insight No. 1: Stop patching the CVE dumpster fire with Vulnrichment It's time to integrate the crucial data — Common..