DevSecOps

AI-based, software development, ai, code generation, repositories, GitHub, Arm, extension, GitHub, Copilot, Git, bloat, malicious, GitLab, memory-safe, CISA, agency, Skillsoft GitHub GitKraken code QA

Most Critical Open Source Projects Lack Memory-Safe Code, CISA Says

Jeff Burt | June 28, 2024 | CISA, FBI, memory safe, memory-unsafe, open source code, oss, softeare development

The country’s top cybersecurity agency is continuing to urge software developers to adopt memory-safe programming languages to help reduce the number of vulnerabilities in their products ...

orca, security, source code, Cycode cloud Atlassian Snyk Security Compass DevSecOps JFrog Trend Micro open source Copado devSecOps OpenSSF

Orca Security Adds Ability to Scan Source Code for Vulnerabilities

Mike Vizard | June 28, 2024 | application, DevSevOps, Orca Security, source code, workloads

Orca Security this week extended the reach of its cybersecurity portfolio to include an application that scans source code stored in GitHub and GitLab repositories for vulnerabilities ...

Ensuring Application Security from Design to Operation with DevSecOps

Alex Vakulov | June 28, 2024 | application security, devsecops, secure development, security, security testing, vulnerabilities

Safe development is critical for any company that creates software, whether for its own use or for others. DevSecOps principles focus on automating information security processes and introducing security measures early in ...

Datadog Extends Scope and Reach of Observability Platform

Mike Vizard | June 26, 2024 | ai, datadog, devops, devsecops, observability, tools

Datadog at its DASH 2024 conference added a bevy of tools and capabilities to streamline DevSecOps workflows, including integration with open-source OpenTelemetry agent software developed under the auspices of the Cloud Native ...

Decoding DevSecOps: Striking the Right Balance

eitan worcel | June 21, 2024 | devsecops, security, software development

DevSecOps has promise and pitfalls, and we need a path forward to achieve a balance between speed and security ...

From Concept to Reality: How ASPM Brings DevSecOps to Life

Mark Levy | June 21, 2024 | Application Security Posture Management, CI/CD, devsecops, Software Delivery Lifecycle

Building on the foundation laid by DevSecOps, ASPM represents a leap forward in operationalizing these principles within the CI/CD process ...

continuous testing, strategy, cloud testing, plan, software testing, web application, testing, test, security, DevSecOps, Tools, API tools, testing, GenAI, SmartBear Redgate test engineers, AI-driven, Applitools SapientAI software, automated, PractiTest test automation continuous test low-code testing automation PagerDuty

Survey Surfaces Extent of Web Application Security Crisis

Mike Vizard | June 19, 2024 | devsecops, web application testing

A survey of 349 U.S. and UK cybersecurity professionals finds that while 60% work for organizations that update web applications at least once a week nearly three-quarters (75%) test their web applications ...

Digital.ai Extends Scope and Reach of DevSecOps Platform

Mike Vizard | June 17, 2024 | CNCF, devsecops, Digital.ai, Erawan, Microsoft Azure

The Erawan Release of a DevSecOps platform provides a set of new and enhanced capabilities to help automate applications security along with integration with Backstage, an open-source internal developer platform originally developed ...

application, vulnerabilities, devsecops, developers, appsec, tool, appsec, Bionic modernization DevSecOps AppSec Cortex materialized view SIEM

Mend.io Adds Tool to Detect Presence of Generative AI Code

Mike Vizard | June 14, 2024 | AI AppSec, appsec, GenAI, GenAI code, SBoM

Mend.io this week added a MendAI tool to its application security portfolio that identifies code generated by an artificial intelligence (AI) model ...

Splunk Adds Data Management and AI Tools to Observability Portfolio

Mike Vizard | June 12, 2024 | AI tools, data management, GenAI, SPL

Recent adoption shows that AI tools enable more applications at scale. However, the application environment is going to be that much more complex as the number of dependencies between applications and services ...

AI/ML, security, cloud security, DevSecOps, AWS, Security AppSec Managing cloud security

AWS Previews Generative AI Tool for CloudTrail Activity Logs

Mike Vizard | June 11, 2024 | ai, AI tools, AWS, Cloud Security, data lake, devsecops, GenAI

AWS today previewed a GenAI tool for its AWS CloudTrail data lake and is focusing most of its cybersecurity efforts on a new generation of cloud infrastructure that is inherently more secure ...