Though top-performing vulnerability mgmt programs are now mostly automated, the best employ a mix of continuous integration w/ traditional human-based #pentesting. Coalfire’s Pete Deros & Bruce DeYoung detail more pen risk findings on @NowSecureMobile blog bit.ly/3DMFi0x

How can improving maturity for #DevSecOps and #AppSec teams help organizations address #supplychain risk concerns? Find out in on-demand webinar with Coalfire and @InterosInc's @geraint_john: bit.ly/3TBTA9w @danielcornell

In @HouSecCon session this Thursday (October 20) at 1pm CT, Coalfire’s @danielcornell will discuss the current state of software #supplychain security issues as well as strategies to help address these risks. Don’t miss it! bit.ly/3yPemut #riskmanagement

Trust us, web app pen testing pays off over time. On average, companies see a 25% reduction in high-severity vulnerabilities when maintaining an ongoing app pen testing program for 3+ years. Check out the full report to boost your #pentesting program. bit.ly/3QBbuaF

How can software developers address the recent Office of Management and Budget (OMB) mandates by building out a risk-based application security program? Find out in new post by Coalfire’s @danielcornell: bit.ly/3UtmbPF #AppSec #riskmanagement

📢 Announcing the release of our 4th annual Penetration Risk Report! Thousands of pen tests over 4 yrs show us how far orgs have come & how far they have to go. Discover what #riskmgmt shifts are taking place bit.ly/3QBbuaF Addl mobile appsec findings by @NowSecureMobile

Organizations are hyper-focused on strengthening their external posture but may be ignoring ongoing internal risks. This & more results in new penetration risk research, w/ additional mobile app findings provided by @NowSecureMobile bit.ly/3QBbuaF #Securealities #pentest

Big news! @CoalfireFederal has been authorized by The Cyber Accreditation Body (Cyber AB) as one of the first third-party assessment firms qualified to conduct CMMC audits for the federal Defense Industrial Base. Learn more at: bit.ly/3R42ify #CMMC

We're excited to be named one of @Consulting_Mag's Fastest Growing Firms for the THIRD time in a row! There's a lot to be proud of, & we aren't stopping anytime soon! Check out our careers page to explore open roles. bit.ly/3jIrlpZ #CoalfireNation bit.ly/3PzrSI3

Thanks to everyone who came by our booth at #BHUSA last week & tried their hand at lock-picking for a special prize! AND another BIG thanks to Coalfire’s @SecurePessimist, Larry Carson, @scottj & Warren Kopp for leading a great virtual @BlackHatEvents training session on #AppSec!

Here’s a look back at @defcon last week, with Coalfire's Rick Osgood speaking at the Ham Radio Village and @redteamwynns speaking on intermediate #physicalsecurity! #defcon30

Coalfire staff enjoyed a nice dinner after a long day one at #BlackHat2022! With remote workers all over the country, it's great to spend time together in person. #CoalfireNation

#BlackHat2022 We are ready for you! Come see us at booth #2651 to try your hand at lock picking for a special prize! Bonus points if you can beat our expert pen testers. #pentesting #blackhat #ethicalhacking

Who’s attending Black Hat USA next week (August 6-11)? Visit us at Booth #2651! And don’t miss our training session with Coalfire’s @SecurePessimist, Larry Carson, @scottj, and Warren Kopp bit.ly/3vGx8BO #AppSec #BHUSA @BlackHatEvents

AppSec champions can win the hearts of developers who get ahead of the “vulnerability production engine” expanding the attack surface. In recent webinar w/ Coalfire’s @johnbdickson, now on-demand, see how security orgs can train w/ champions in the field: bit.ly/3SaIgkH

Coalfire VP @danielcornell discusses the findings from our recently released Software Supply Chain Risk rpt & reveals how senior-level leaders should address software #supplychain security in @DarkReading bit.ly/3zfct9V Download the full report: bit.ly/3crbFXm

Announcing our first annual #Securealities Software Supply Chain Risk report, based on results from our survey conducted by @cyberriskall on managing software #supplychain risk along the entire software development lifecycle bit.ly/3crbFXm bit.ly/3ci3WuN #DevOps