AppSec Observer: Thought Leaders (10)

CISO Thoughts with David Lindner - April 29

Insight #1 "How do you measure risk between vulnerabilities in custom code vs vulnerabilities in third-party code? To..

Contrast Protect Blocks Spring4Shell | Contrast Security

CISO Thoughts with David Lindner - April 22

Insight #1 " Another critical Java zero-day was revealed in the last week. Turns out, the issue was originally reported..

CISO Thoughts with David Lindner - April 15

Insight #1 "Again we had an instance where a CVE was not appropriately fixed and a year later a new CVE was released..

CISO Thoughts with David Lindner - April 8

Insight #1 Every single CISO/CIO should realize their organization is building and using software. That being said,..

CISO Thoughts with David Lindner - April 1

Insight #1 Spring4Shell, the latest vulnerability in a Java ubiquitous library is the second major vulnerability in the..

Cyber Incident Reporting For Critical Infrastructure Act of 2022

On March 15, 2022, United States President Joe Biden signed the Cyber Incident Reporting For Critical Infrastructure..

CISO Thoughts with David Lindner - March 18th

Insight #1 If you can accomplish one thing in your AppSec program this year, it should be keeping secrets out of your..

New Gartner® Report Details How Businesses Should Incorporate SBOMS Into The SDLC

The proliferation of third-party software, especially open-source software (OSS), is a mainstay in modern development...