DevSecOps
Survey Sees Limited DevSecOps Progress Being Made as Vulnerabilities Mount
A recent survey found that, on average, organizations have 55.5 security vulnerabilities each day in their remediation queue, with at least one critical ...
Securing the DevOps Pipeline: Tools and Best Practices
Because of the critical nature of the DevOps pipeline, security is becoming a top priority. Here's how to integrate DevSecOps ...
Why DevOps is Key to Software Supply Chain Security
Kirsten Newcomer | | devops, devsecops, IT Service Delivery, SBOM (Software Bill of Materials), shift left security, Software Supply Chain Security, supply chain attacksOrganizations can maintain their DevOps momentum while protecting the software supply chain by shifting security left ...
Cycode Brings Generative AI to App Security Posture Management
Mike Vizard | | application security, appsec, ASPM, Cycode, generative AI, posture management, vulnerabilitiesCycode's generative AI capabilities in its ASPM platform make it simpler for DevSecOps teams to identify the root cause of vulnerabilities ...
Techstrong Research: Combatting CI/CD Security Anti-Patterns
Mitch Ashley | | CI/CD, continuous delivery, continuous integration, devsecops, security, Software Supply Chain Security, Techstrong ResearchTechstrong Research finds the imperative to secure the software supply chain and CI/CD pipelines is undeniable and urgent ...
ReversingLabs Applies AI to Better Secure Application Binaries
Mike Vizard | | application development, binaries, ReversingLabs, software development, Software Supply ChainReversingLabs launched a binary analysis tool that uses machine learning algorithms to identify risks before and after apps are deployed ...
Veracode Report Shines Spotlight on Massive Application Security Debt
In an analysis of more than a million applications, Veracode found 42% contained flaws that remained unfixed for longer than a year ...
Squaring the Circle: How to Make Public APIs Private
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here's how to stop them ...
Legit Security Adds Sensors to Detect Usage of Gen AI Tools to Write Code
Mike Vizard | | ASPM, coding assistants, devsecops, generative AI, Legit Security, software developmentLegit Security updated its ASPM platform with the ability to detect when developers use generative AI tools to write code ...
Survey: Cyberattacks Aimed at Software Supply Chains are Pervasive
A survey found the vast majority of respondents work for organizations that experienced a software supply chain incident in the past 12 months ...
GitGuardian Allies With CyberArk to Better Protect App Secrets
GitGuardian has allied with CyberArk to streamline secrets detection and management by making it easier to share insights ...
OpenText Extends Tool for Auditing Source Code Using Machine Learning
OpenText updated a static analysis code auditing tool using machine learning algorithms to provide deeper insights into on-premises IT environments ...
