October 2024

New

New Course Templates

New Course templates have been added, as follows

Architecture Risk Analysis (ARA)

Contains 9 language-agnostic guidelines, including:

• ARA Overview
• Design Flaws and the Techniques That Find Them
• ARA in a Nutshell
• The Role of Diagrams, Diagramming in ARA
• Business Context
• Dependency Analysis
• Applying Design Principles for ARA
• Known Attack Analysis
• Fitting ARA into an SDL

Attack and Defense

Contains 7 language-agnostic guidelines, including:

• The Diamond Adversary Model
• Attacker Quadrants, Advanced Persistent Threat (APT) Groups, and Real-World Examples of
• Tactics, Techniques, and Procedures (TTPs)
• Supply Chain Vulnerabilities and Testing Open Source Libraries
• Cloud Security and Infrastructure Protection
• Secure Architecture Design, Secure Configuration, Management, and Monitoring & Alerting
• Examples of Good and Bad Application Security Defenses
• Further Defense Strategies and Best Practices

Learning Activity Report

The Learning Activity report provides more detail on the self-paced learning developers can take in Quests and Explore, our newest playmodes.

Cybermon: October Cybersecurity Awareness Campaign

Cybermon is a fun and engaging learning campaign spanning 4 weeks in October where the SCW platform becomes home to 4 different Cybermons representing common vulnerabilities that developers should be aware of. Each Cybermon can be defeated to earn special badges and those who defeat all 4 Cybermons are crowned surpreme as Cyberhero.

Trust Agent Enhancements

Various enhancements to Trust Agent such as:

• Version 1 of language and framework detection
• Various UX improvements
• Improvements to the on-premise version of Trust Agent

Trust Score 2025 Update - Announcement

An exciting update to Trust Score is coming. Find out more here.