The state of app sec with Chris Romeo: The year of the application is near

The discipline of application security has been around for decades, but major advancements in how software is built and distributed are shifting the ground underneath application security teams — increasing opportunities for attackers to take advantage of security lapses in application development and deployment.

That has led to attacks on software supply chains like the recent 3CX compromise, and a dawning realization that traditional tooling, such as static and dynamic application security testing (SAST/DAST), while vital, do not …

app application application development application security app sec attackers chris deployment development distributed lapses major near opportunities sec security security teams software state teams