<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/"><channel><title>NakamaCyber blog (English)</title><description>Code review and application security articles from NakamaCyber.</description><link>https://nakamacyber.com/blog</link><language>en</language><atom:link href="https://nakamacyber.com/rss.xml" rel="self" type="application/rss+xml"/><item><title>Best AI for coding: none of them writes secure code without review</title><link>https://nakamacyber.com/blog/best-ai-for-coding-security</link><guid isPermaLink="true">https://nakamacyber.com/blog/best-ai-for-coding-security</guid><description>Claude, GPT-5, Gemini: even the best AI for coding still lets vulnerabilities through. The scores by model, and what protects your code.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><dc:creator>Azziz ERRIME</dc:creator><category>best AI for coding</category><category>AI-generated code security</category><category>AI-generated code vulnerabilities</category><category>is AI-generated code secure</category><category>how to secure AI-generated code</category><category>Claude vs ChatGPT coding</category><category>code review</category></item><item><title>DORA training, NIS2, PCI DSS: records don&apos;t prove effectiveness</title><link>https://nakamacyber.com/blog/dora-training-requirements</link><guid isPermaLink="true">https://nakamacyber.com/blog/dora-training-requirements</guid><description>DORA training, NIS2, PCI DSS, ISO 27001: what the regulations require of developers, what the auditor checks, and the evidence still missing.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><dc:creator>Azziz ERRIME</dc:creator><category>DORA training</category><category>DORA training requirements</category><category>PCI DSS 622</category><category>PCI DSS developer training requirements</category><category>NIS2 training requirements</category><category>ISO 27001 competence</category><category>AI Act article 4</category></item><item><title>How to measure training effectiveness: completion isn&apos;t enough</title><link>https://nakamacyber.com/blog/measure-training-effectiveness</link><guid isPermaLink="true">https://nakamacyber.com/blog/measure-training-effectiveness</guid><description>Measure training effectiveness in security awareness: why completion rates mislead, and which behavioural indicators to track instead.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><dc:creator>Azziz ERRIME</dc:creator><category>measure training effectiveness</category><category>how to measure training effectiveness</category><category>Kirkpatrick model</category><category>security awareness training metrics</category><category>training completion rate</category></item><item><title>Secure coding training: the score is no measure of vigilance</title><link>https://nakamacyber.com/blog/secure-coding-training</link><guid isPermaLink="true">https://nakamacyber.com/blog/secure-coding-training</guid><description>Secure coding training compared: PortSwigger, Juice Shop, Secure Code Warrior, classroom. What each option measures, and what it misses in review.</description><pubDate>Fri, 02 Oct 2026 00:00:00 GMT</pubDate><dc:creator>Azziz ERRIME</dc:creator><category>secure coding training</category><category>secure coding training platform</category><category>application security training</category><category>developer security training</category><category>Secure Code Warrior alternatives</category><category>PCI DSS 622</category></item><item><title>Code review: AI writes faster than your teams can review</title><link>https://nakamacyber.com/blog/code-review-ai</link><guid isPermaLink="true">https://nakamacyber.com/blog/code-review-ai</guid><description>A 13,323-line pull request written with AI, closed after just over fifteen hours: what needs to change in your code review.</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate><dc:creator>Azziz ERRIME</dc:creator><category>code review</category><category>AI code review</category><category>AI-generated code</category><category>secure code review</category><category>code review best practices</category><category>pull request</category></item></channel></rss>