DevSecOps
Report Surfaces Thousands of Potential Vulnerabilities in GitHub Workflows
An analysis of 2.5 million GitHub Actions workflow files belonging to 553,000 organizations and personal users surfaces thousands of potential vulnerabilities ...
Helping Developers Build Secure APIs From the Start
Karthik Krishnaswamy | | access controls, API, API security, authentication, Authorization, encryptionDevelopers are already tasked with creating and managing APIs; they must also be empowered to secure them easily ...
Survey Surfaces Lots of Software Supply Chain Insecurity
A global survey of 900 application security professionals finds nearly two-thirds work for organizations that have had their software supply chains compromised in the past two years ...
Open-Source Software Community Riled by Yet Another CVE
Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers ...
Aqua Security Shines Spotlight on Secrets Management Blindspots
A report published by Aqua Security finds that as many as 18% of secrets inadvertently exposed are not being discovered ...
Most Critical Open Source Projects Lack Memory-Safe Code, CISA Says
The country’s top cybersecurity agency is continuing to urge software developers to adopt memory-safe programming languages to help reduce the number of vulnerabilities in their products ...
Orca Security Adds Ability to Scan Source Code for Vulnerabilities
Orca Security this week extended the reach of its cybersecurity portfolio to include an application that scans source code stored in GitHub and GitLab repositories for vulnerabilities ...
Ensuring Application Security from Design to Operation with DevSecOps
Alex Vakulov | | application security, devsecops, secure development, security, security testing, vulnerabilitiesSafe development is critical for any company that creates software, whether for its own use or for others. DevSecOps principles focus on automating information security processes and introducing security measures early in ...
Datadog Extends Scope and Reach of Observability Platform
Datadog at its DASH 2024 conference added a bevy of tools and capabilities to streamline DevSecOps workflows, including integration with open-source OpenTelemetry agent software developed under the auspices of the Cloud Native ...
Decoding DevSecOps: Striking the Right Balance
DevSecOps has promise and pitfalls, and we need a path forward to achieve a balance between speed and security ...
From Concept to Reality: How ASPM Brings DevSecOps to Life
Mark Levy | | Application Security Posture Management, CI/CD, devsecops, Software Delivery LifecycleBuilding on the foundation laid by DevSecOps, ASPM represents a leap forward in operationalizing these principles within the CI/CD process ...
Survey Surfaces Extent of Web Application Security Crisis
A survey of 349 U.S. and UK cybersecurity professionals finds that while 60% work for organizations that update web applications at least once a week nearly three-quarters (75%) test their web applications ...
