Skip to content

AppSec Observer

Contrast's application security blog provides the latest trends and tips in DevSecOps through instrumentation and security observability.

Subscribe Now
    Topics
    Cybersecurity Insights with Contrast CISO David Lindner | 1/12/24

    Cybersecurity Insights with Contrast CISO David Lindner | 1/12/24

    Insight #1 Have you enabled two-factor (2FA) on your X account? The Securities & Exchange Commission (SEC) hadn't, but..

    Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24

    Cybersecurity Insights with Contrast CISO David Lindner | 1/5/24

    Insight #1 In light of 23andMe blaming victims for their data getting breached, I have two things to ask: Users, please..

    Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23

    Cybersecurity Insights with Contrast CISO David Lindner | 12/15/23

    Insight #1 2023 saw the "transparency" movement continue for software organizations. In 2024, this will continue, and..

    It’s time to replace our broken AppSec tools with something that actually works: Runtime Security

    It’s time to replace our broken AppSec tools with something that actually works: Runtime Security

    Tell us straight, Santa: Where did these old-school Application Security (AppSec) tools come from? Did you get the..

    Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/8

    Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/8

    Insight #1 Guard against island hopping. The recent ransomware attack against 60 credit unions was due to the lack of..

    Contrast Security recognized in the 2023 Gartner® AppSec Testing Voice of the Customer report

    Contrast Security recognized in the 2023 Gartner® AppSec Testing Voice of the Customer report

    The 2023 Gartner Peer Insights™ “Voice of the Customer”: Application Security Testing report has recognized Contrast..

    Contrast discovers MLflow framework zero-day that threatens to poison machine language models

    Contrast discovers MLflow framework zero-day that threatens to poison machine language models

    Most Machine Language (ML) tools — including the development frameworks used for managing ML life cycles — are..

    Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/1

    Cybersecurity Insights with Contrast SVP of Cyber Strategy Tom Kellermann | 12/1

    Insight #1 The upcoming disclosure requirements from the Securities Exchange Commission (SEC) (PDF) are game-changing...

    Don’t throw good AppSec money after bad

    Don’t throw good AppSec money after bad

    From the “How does this make sense?” department comes this finding: The more they get breached, the more likely it is..