Resources

News & Press

Discover Software Secured's latest in news and press releases.

Featured

Unlocking Trust: How SOC 2 Validated Our Security Program

In Software Secured's commitment to protecting customers data and trust, Software Secured has been pursuing SOC 2 accreditation. We are proud to announce that we passed our recent SOC 2 audit and have been awarded a SOC 2 Type 1 certification.

April 4, 2024
Read More
Featured

Unlocking Trust: How SOC 2 Validated Our Security Program

In Software Secured's commitment to protecting customers data and trust, Software Secured has been pursuing SOC 2 accreditation. We are proud to announce that we passed our recent SOC 2 audit and have been awarded a SOC 2 Type 1 certification.

April 4, 2024

Read our news & press

The media industry is the most vulnerable to cyber attacks, the "State of Penetration Testing as a Service" report shows

The report highlights concerning security stats following two years of extreme tech growth.

January 19, 2023

Global Penetration Testing Market to Reach $2.7 Billion by 2027

The global Penetration Testing market size is expected to grow from an estimated value of USD 1.4 billion in 2022 to USD 2.7 billion by 2027, at a Compound Annual Growth Rate (CAGR) of 13.7% from 2022 to 2027.

September 16, 2022

Security vs. user experience: Finding the balance

Consumers worldwide now believe that strong digital security and a rewarding user experience are equally important, and many are ready to abandon services that don't offer enough of both.

June 29, 2022

Flaw in preprocessor language Less.js causes website to leak AWS secret keys

A vulnerability in popular preprocessor language Less.js could be exploited to achieve remote code execution (RCE) against websites that allow users to input Less.js code, researchers have warned. It is this feature that can leave a user vulnerable to remote attack, researchers from Canadian infosec firm Software Secured detailed.

July 12, 2021

Threat modeling gets its manifesto: Map out your app sec risk first

Despite its importance in creating a proactive posture toward cyber attacks, threat modeling remains largely misunderstood by many organizations. To clarify matters, a group of 15 security community leaders released the Threat Modeling Manifesto to inform and educate other practitioners as well as to inspire them to adopt threat modeling and improve security and privacy during software development.

November 18, 2020

Why existing secure SDLC methodologies are failing

Although tools such as static code analysis and vulnerability scanning have been successful in improving application security, organizations have begun to recognize the value of the early integration of security reviews within the SDLC—most notably for its ability to drive down the cost of managing and fixing security-related bugs.

January 23, 2019