DevSecOps
Digital.ai Extends Scope and Reach of DevSecOps Platform
The Erawan Release of a DevSecOps platform provides a set of new and enhanced capabilities to help automate applications security along with integration with Backstage, an open-source internal developer platform originally developed ...
Mend.io Adds Tool to Detect Presence of Generative AI Code
Mend.io this week added a MendAI tool to its application security portfolio that identifies code generated by an artificial intelligence (AI) model ...
Splunk Adds Data Management and AI Tools to Observability Portfolio
Recent adoption shows that AI tools enable more applications at scale. However, the application environment is going to be that much more complex as the number of dependencies between applications and services ...
AWS Previews Generative AI Tool for CloudTrail Activity Logs
AWS today previewed a GenAI tool for its AWS CloudTrail data lake and is focusing most of its cybersecurity efforts on a new generation of cloud infrastructure that is inherently more secure ...
Backslash Security Extends Reach of Application Security Platform
Making the Backslash application security platform even more secure with news of added support as well as a revamped, simpler user interface ...
OpenSSF Siren: Security for One, Security for All
Steven J. Vaughan-Nichols | | CVEs, intelligence sharing, iocs, NIST, open source, OpenSSF, risk mitigation, siren, TTPsThe OpenSSF Siren is a fresh, new take on ye old security mailing list ...
No Country for No-Code: Are We Heading Towards a Wild West of Software Security?
Michael Burch | | application security, citizen developers, CVEs, Low Code, No Code, software securityThe specter of an untrained employee creating applications is alarming: No-code/low-code platforms empower employees with no application security knowledge to develop programs that security teams don’t know exist ...
Sumo Logic Previews GenAI Tool to Improve DevSecOps Observability
Sumo Logic this week at the RSA Conference previewed a copilot that leverages generative artificial intelligence (AI) to make it simpler for IT and cybersecurity professionals of varying levels of experience to ...
The Role of DevOps in Orchestrating Enterprise-Wide Cloud Security
Ekambar Kumar Singirikonda | | Cloud Security, devops, devsecops, Enterprise-Wide Cloud Security, infrastructure as code, securityBy implementing DevSecOps practices, organizations can proactively address security concerns early in development, reducing vulnerabilities ...
What OpenTofu 1.7 Means for DevSecOps
With built-in end-to-end encryption, OpenTofu is a natural DevSecOps fit ...
The Role of AI in Securing Software and Data Supply Chains
Expect attacks on the open source software supply chain to accelerate, with attackers automating attacks in common open source software projects and package managers ...
Securing Open Source Software, the Cyber Resilience Act Way
Steven J. Vaughan-Nichols | | Cyber Resilience Act, cybersecurity standards, Eclipse Foundation, open source, Open Standards, programming, secure developmentThe Eclipse Foundation is spearheading an effort to create a unified framework for secure software development ...
