Blog | ReversingLabs | Ericka Chickowski

January 28, 2025

AI is a double-edged sword: Why you need new controls to manage risk

AI can improve cybersecurity outcomes, but it also represents an entirely new threat. Upgrade your security strategy — and tooling — for the AI age.

January 15, 2025

Going beyond 'shift left': Why shared responsibility is key to risk management

AppSec experts and software risk managers say organizations must move beyond shift left. Here's why — and how to make that happen.

November 7, 2024

AppSec vs. product security: Secure by Design demands a strategy shift

Here's why and how to push your application security further into ProdSec — and what that means to achieving the goals of CISA's Secure by Design.

October 16, 2024

Threat modeling and binary analysis: Supercharge your risk strategy

Chris Romeo shares five key ways to merge modeling with software supply chain security — and improve your software risk management in the process.

September 26, 2024

‘Good, fast, cheap... Pick two’: Software quality dilemma forces risky decisions

When developing software there are three options: good, fast, and cheap. But you can only pick two. Here's what that means for commercial software risk.

August 20, 2024

Cybersecurity's workforce woes are a myth: 5 ways to rethink recruiting

Leaders say a cybersecurity talent shortage is a myth — instead, it's a plain old hiring and training gap. And the industry is making the problem worse.

August 7, 2024

Software complexity is a real problem — and your AppSec must factor that in

Software complexity causes a range of challenges. Here are the key problem areas — and how to overcome them with a modern supply chain security approach.

July 10, 2024

The state of DevSecOps: Why upgrading your AppSec tooling is essential

Here's what's holding DevSecOps back — and why modernizing your application security tooling is critical in the software supply chain security era.

May 22, 2024

Why sharing is essential for making software bills of materials actionable

A number of factors are converging to make SBOM sharing a reality. Here are key concerns — and why data sharing is essential to making SBOMs effective.

April 17, 2024

Where GenAI intersects with threat modeling: 3 key benefits for AppSec

Generative AI can ease the burdens of threat modeling — and speed it up. But it's not a panacea. Here's what security teams can realistically expect.

April 9, 2024

When GenAI and low-code collide: What could go wrong for AppSec?

Here's why the duo is a perfect storm, key considerations — and expert advice on how engineering and application security teams can tackle the problem.

March 20, 2024

7 ways to put your code on a diet — and improve AppSec in the process

Code bloat is at the root of many security problems. Here's how development teams can bolster application security with more efficient code.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

Ericka Chickowski

Recent Posts from Ericka Chickowski