Insights from experts shaping secure development

#대다수의 웹 사이트는 XML 데이터베이스를 사용하여 사용자 로그인 자격 증명, 고객 정보, 개인 신원 정보 및 기밀 또는 민감한 데이터를 보관하는 것과 같은 중요한 데이터를 보관하므로 xQuery 공격, 면적이 다소 커집니다.

잘못된 보안 구성이란 무엇입니까?가장 많이 발생하는 보안 구성 오류와 취약성 방지 방법을 찾아보세요.시큐어 코드 워리어로부터 배워보세요.

딸과 회사가 나이가 들수록 스타트업 여정과 처음으로 부모가 되는 여정 사이에는 유사점이 너무 많다는 것을 더 많이 깨닫게 됩니다.저는 이제 둘 다 4년차에 접어들었습니다.pi

Kamer van Koophandel shares how it embedded secure coding into everyday development through role-based certifications, Trust Score benchmarking, and a culture of shared security ownership.

See how Paysafe's partnership with Secure Code Warrior led to a 45% boost in developer productivity and a major reduction in code vulnerabilities.

DigitalOcean's use of Secure Code Warrior training has significantly reduced security debt, allowing teams to focus more on innovation and productivity. The improved security has strengthened their product quality and competitive edge. Looking ahead, the SCW Trust Score will help them further enhance security practices and continue driving innovation.

An alleged nation-state attacker used Claude Code and a range of tools in the developer ecosystem, namely Model Context Protocol (MCP) systems, to almost autonomously target specific companies with benign open-source hacking tools at scale. Of the over thirty attacks, several were successful, and proved that AI agents could indeed execute large-scale, malicious tasks with little to no human intervention. Maybe it’s time we went a little slower, stopped to reflect on what is at stake here, and how best to defend ourselves.

AI is now a key piece of modern software development. More than four out of five developers use AI coding tools daily or weekly – with many relying on multiple tools in parallel. Teams must understand where automation ends, and where accountability begins.

Secure code should be grounded more in concepts like secure by default and secure by design than by “spot the vuln” thinking. Matias Madou shares his experience in secure coding training and the importance of teaching critical thinking. He also discusses why critical thinking is so closely related to threat modeling and how LLMs can be a tool for helping developers get beyond the superficial advice of, “Think like an attacker.”

See how 16 leading AI models actually code, scored across 11 real-world frameworks and 1,760 codebases — the framework matters as much as the model.

AI risk doesn't stop at engineering. Get the one-pager on Citizen AI — build AI literacy and safe habits across your whole workforce.

From AI autocomplete to autonomous agents—explore how software development is evolving and what it means for security, governance, and your team.