Application and infrastructure security in plain terms: threats and defences, detection and response, from web apps and APIs to the cloud, AI and incident plans.