DevSecOps
SecDevOps is the Solution to Cybersecurity
Anybody paying attention to world news will notice that the threats and risks perpetrated by cybercriminal actors, in many forms, is a serious problem on the rise, affecting individuals, organizations and nations ...
Developer’s Guide to Open Source Spring Cleaning
Spring is here, and after a year filled with record-setting digital transformation and its associated vulnerabilities, now is the right time to give the open source components in your codebase a refresh ...
SAST, DAST, SCA: What’s Best For AppSec Testing?
According to the most recent Verizon Data Breach Investigations Report, almost 90% of data breaches are driven by financial gain, up from 71% in last year's report. Most noteworthy, however, is that ...
The Basics of DevSecOps Adoption
Embracing DevOps is essential, but keeping the software delivery and deployment pipeline safe has become more critical than ever. While attackers are keen on getting into your Docker containers or Kubernetes clusters, ...
DevOps Connect at RSAC 2021: Insightful Talks, Live Q&A, Workshops, Pilates and More
Veronica Haggar | | appsec, Christopher Krebs, Cloud Security, Cybersecurity, devops connect, devsecops, rsa conference, RSAC, RSAC 2021, virtual event, Workshop FridayWe are excited to announce the return of DevOps Connect: DevSecOps Virtual Summit on May 19, as part of the RSA Conference 2021. This year, internationally recognized speakers will take a deep ...
The Time for Collaborative Security Is Now
As Bruce Schneier famously said, “security is a process, not a product.” We commonly see companies pour millions of dollars into cybersecurity products and tools to protect against vulnerabilities and lower risks, ...
How to Bring DevOps and Security Teams Closer Together
More often than not, there seems to be friction between DevOps and security teams. Despite having the same end goals of creating the most secure code and preventing any potential security pitfalls, ...
Live Fireside Chat with Christopher Krebs: How to Combat Disinformation
Veronica Haggar | | Christopher Krebs, CISA, Cybersecurity, Department of Homeland Security, devops connect, DevOps Connect: DevSecOps, DHS, disinformation, rsa conference, RSACWe live in a digital world where most information is now found online. This makes it increasingly difficult to verify the veracity of information. Threat actors have been taking advantage of the ...
The Pandemic’s Impact on Mobile App Security
Mobile device use has continued to grow throughout the global pandemic, surpassing 5.19 billion mobile phone users worldwide over the past year. As a result, companies have been launching mobile apps at ...
Is Low-Code Development a Security Risk?
According to Gartner, the worldwide low-code development market is projected to be $13.8 billion in 2021, a whopping increase of 22.6% from 2020. Gartner also predicts that the surge in remote development ...
WhiteSource Acquires Diffend to Secure Open Source Supply Chains
WhiteSource this week announced it has acquired Diffend as part of an expended effort to discover malware that has been deliberately injected into open source software by a contributor acting in bad ...
DevSecOps Practices Gap Assessment
DevSecOps practices are essential to deliver software safely and securely withinDevOps value streams. To get the maximum security protection from DevSecOps, it is important to use recommended best practices, inclusive of people, ...
