AppSec Observer
Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.
Subscribe NowTopics
- Thought Leaders
- Application Security
- Contrast News
- DevOps
- AppSec
- vulnerabilities
- Hacked
- Threat
- Runtime Security
- cyberattacks
- API security
- DevSecOps
- ADR
- cybersecurity
- Product
- Contrast Protect
- RASP
- Contrast Assess
- AI
- Application Detection and Response (ADR)
- Security
- CodeSec
- MFA
- incident response
- APIs
- Metrics
- cybersecurity awareness month
- CISA
- CVE
- OSS
- data breach
- ransomware
- 2FA
- IAST
- threat detection
- vulnerability
- CISO
- SCA
- WAF
- passwords
- runtime protection
- SOC
- SQL injection
- Vulnerability Management:
- application attacks
- application layer
- regulation
- transparency
- AWS
- CISOs
- Cloud security
- Contrast Scan
- JavaScript
- Log4Shell
- Log4j
- MTTR
- SAST
- backlog
- risk management
- threat modeling
- .Net
- Application Layer Security
- EDR
- GitHub
- OpenSource
- SIEM
- Security Observability
- Threat Detection and Response
- Threat Intelligence
- XSS
- attack
- breach
- critical infrastructure
- cyberespionage
- cybersecurity incident reporting
- observability
- path traversal
- scan
- software development
- unsafe deserialization
- zero-day
- AST
- Application Detection and Response
- Awards
- CISO Insights
- ChatGPT
- Community Edition
- Contrast ADR
- Contrast SCA
- Cybersecurity Risk Management
- DBIR
- DHS
- Gen AI
- KVE
- Log4Shell attacks
- Log4Shell exploit
- Log4j vulnerability
- NIST CVE Backlog
- OpenAI
- RSA
- React
- Runtime Application Security
- Runtime Visibility
- Security Operations Center (SOC)
- Security Vulnerability Management
- Splunk
- Web Application Firewall (WAF)
- Zero-Day Exploits
- alert fatigue
- artificial intelligence
- awareness
- chat apps
- cybercrime
- cybersecurity culture
- data privacy week
- detection
- detection response
- exploit
- extended detection response
- financial institutions
- financial sector
- jQuery
- malware
- method tampering
- okta
- python
- remediation
- sbom
- secure by design
- security culture
- security monitoring
- shift smart
- supply chain
- training
- untrusted deserialization
- vulnerability detection
- vulnerability disclosure
- workplace
- zero days
- .NET application
- .Net
- ADR (Application Detection and Response)
- AI Act
- AI Assistants (Attack Tools)
- AI adoption
- AI censorship
- AI guidance
- AI-powered security remediation
- Angular
- Application Blindspot
- Application Monitoring
- Application Security (AppSec)
- Application context
- Application-Layer Visibility
- Architecture design
- Article 25
- Attack Detection and Response (ADR)
- Attack Trends
- Attack detection
- Attacks
- Behavioral analysis
- Below the Waterline
- Board buy-in
- Business risks
- CFO
- CISA Log4Shell
- CISA Vulnrichment
- CNAPP
- CSRF
- CVE Enrichment
- CVE program
- CVE-2021-44228
- CVSS Scores
- Chris Hughes
- Cloud Native Security
- Cloud platform protection
- Command Injection
- Console
- Contrast AI remediation
- Contrast One
- Crisis simulations
- Cross-site scripting
- Cyber Bank Heists
- Cyber insurance policy
- Cybersecurity Collaboration
- Cybersecurity Funding
- Cybersecurity ROI
- Cybersecurity tools
- DAST
- DORA
- Data protection
- DeepSeek AI
- Dependabot
- Developers
- Digital Operational Resilience Act
- Drupal
- EL injection
- EU Product Liability Directive (PLD)
- Eliminating blindspots
- Encryption
- Endpoint Detection and Response
- European Commission Amendments
- European Union
- Exploitation
- False Positives
- Gartner Peer Insights
- Genie
- Git
- GitHub Action
- GitLab
- Go
- Government surveillance
- HIPAA
- HIPAA Amendments
- Healthcare Cybersecurity
- How to comply with SEC cybersecurity rules
- Incident Context
- Incident Response challenges with CVE backlog
- Integration
- Intelligent remediation guidance
- Intrusion Detection Systems
- IoT
- KEV catalog
- Known Exploited Vulnerabilities
- LLMs
- Log4Shell remediation
- Log4Shell vulnerability
- Log4j remediation
- MITRE ATT&CK
- MLflow
- MOVEit
- Malicious AI
- Managed Security Services
- Managed security service providers
- Microsoft
- Multifactor Authentication
- Namasday
- National security
- Netflix
- Node.js
- Open source security risks
- OpenEoX
- OpenSourceSoftware
- PATs
- Perimeter defenses
- Proactive approach
- Protect data
- RCA
- RCE
Loving our content? Subscribe now!
Get the latest application security news, trends, tips and insights content from Contrast directly to your inbox. By subscribing, you will stay up to date with all the latest and greatest from Contrast Security.