DevSecOps
Why Developer-First is the Future of AppSec
DevOps culture and rapid cloud adoption mean developers are shipping code faster than ever and, in many cases, security teams struggle to keep up. To avoid relegating security to afterthought status, organizations ...
WhiteSource Tightens Code Scanning Tool Integration with Azure DevOps
WhiteSource has added the Microsoft Azure DevOps platform to the list of continuous integration/continuous delivery (CI/CD) platforms its open source vulnerability scanning tools natively supports. Susan St. Clair, director of product management ...
App Store Antitrust Bill | GDPR vs. Google Fonts | Wordle Worth $1M+
Richi Jennings | | app stores, Apple, devsecops, GDPR, google, , Open App Markets Act, The Long View, The New York Times, WordleIn this week’s The Long View: The Open App Markets Act polls well among devs, Germany fines a website for using Google Fonts, and the NY Times buys Wordle for an unfeasible ...
Continuous Security: The Next Evolution of CI/CD
Following a wave of high-profile cyberattacks and the White House’s release of the executive order on improving the nation’s cybersecurity, how to build a successful cybersecurity program has never been so hotly ...
Embedded Connectivity Solves the Right (and Left) Problem
In Steven Bellovin’s book, "Thinking Security: Stopping Next Year's Hackers," (2015) he wrote: "Companies are spending a great deal on security, but we read of massive computer-related attacks. Clearly, something is wrong ...
Improving Software Security in 2022
Pieter Danhieux | | developer skills, secure code DevSecOps, Secure Code Warrior, Secure Software Summit, shift leftThe recent Log4j vulnerability showed just how quickly a security bug could disrupt not just an industry, but the entire world. Organizations, especially federal agencies, will always find themselves at some level ...
4 Ways to Combat the DevOps and Security Workforce Shortage
Yes
Most people are painfully aware that security breaches have increased in recent years, while at the same time becoming much more sophisticated in their approach. Additionally, ever-expanding application environments and continuously evolving ...
Embracing Security by Design in Development
The number of data breaches publicly reported in 2021 far exceeded the total for 2020, making 2021 a record year. With cyberattacks on the rise and bad actors and ransomware gangs demanding ...
2022 Will Be the Year of the Cyber ‘Shift Show’
As ransomware continues to plague organizations across industries, remote work continues and innovation brings with it new threat vectors for bad actors to exploit, 2022 is poised to be another messy year ...
Infrastructure Access Management a Growing DevOps Priority
Nathan Eddy | | agile infrastructure, Cybersecurity, devsecops, identity and access management, least-privilegeOrganizations plan to address access management over the next 12 months, as the need to secure and streamline infrastructure-wide access controls serves as a prerequisite to other initiatives, like zero-trust. This was ...
Survey Predicts Massive Migration to the Cloud
A global survey of 1,600 enterprise IT decision-makers found more than half are working for organizations that plan to eliminate the use of data centers over the next two years. The survey ...
EEEWW—Green iMessage Bubbles | ‘Great Resignation’ Redux | Faster Firefox 96
Richi Jennings | | A weasel wishing Happy New Year to a chicken harbors no good intention, Apple, devops culture, devsecops, Firefox, Great Resignation, , Lock-in, Mozilla, organizational culture, remote working, The Long View, WFH, work from homeIn this week’s The Long View: iMessage lock-in lessons, attrition-rate fixes, and more on Mozilla ...
