DevSecOps
Linux Foundation Project Secures Software Supply Chains
The Linux Foundation today embraced a sigstore project founded by Red Hat, Google and Purdue University to make it simpler for developers to employ cryptographic software, enabled by transparency log technologies, to ...
GitGuardian Reports Careless Handling of Application Secrets
A new report, the 2021 State of Secrets Sprawl on GitHub, published today by GitGuardian, a provider of a tool for monitoring usage of application secrets, suggests developers are not especially good ...
GrammaTech Allies with GitLab to Advance DevSecOps
GrammaTech announced today it has partnered with GitLab to integrate its GrammaTech CodeSonar static application security testing (SAST) tools with the GitLab Ultimate DevSecOps platform. Vince Arneja, chief product officer at GrammaTech, ...
Cybersecurity 2021: Are You Really Prepared for a Cyberattack?
Veronica Haggar | | appsec, cyberattack, Cybersecurity, Cybersecurity 2021, devsecops, IAM, identity access management, passwordless, security threatsAs the majority of businesses are increasingly moving to the online world, employees keep working remotely and more cyberattacks keep happening all over the globe, there is no doubt that embracing DevSecOps ...
Cloud Migrations Demand Risk and Compliance Maturity
The COVID-19 pandemic brought undeniable disruptions for organizations and their employees whether business, personal or otherwise. Across the globe, businesses and governments alike were forced to try and manage these disruptions. For ...
Game On: Secure Coding Virtual Summit 2021
Veronica Haggar | | API security, application security, appsec, container security, cybersecurity event, devsecops, DevSecOps event, secure coding, threat modelingAgile organizations are looking for ways to win at security without slowing down their release cycles. That’s where DevSecOps comes in. The days of a hands-off security approach for developers are over ...
GitLab Releases Updates to CI/CD Platform
GitLab this week made available a 13.9 update that adds more than 60 new features and updated capabilities to its namesake open source continuous integration/continuous delivery (CI/CD) platform. Brian Glanz, a product ...
Application Security and Continuous Observability with DeepFactor
Mitch Ashley | | application security, appsec, continuous observability, DeepFactor, devsecops, observability, Observability-as-Code, TechStrong TV, TechStrongTVToday's modern applications are becoming increasingly complex and released more frequently than ever before, therefore increasing security, privacy and compliance risks. How do you identify the security and compliance risks hidden in ...
Engineering Practices Can Overcome DevOps Challenges
When I think about the challenges of DevOps transformations, I love the viewpoint expressed by Ryan Harmon, strategic accounts manager at Trace3: “DevOps is a complex maze that has many leaders frustrated ...
Protecting Data from Insider Threats
Manav Mital | | Cyral, devops teams, devsecops, infrastructure, policies-as-code, security as code, zero standing permissions“Insider threat” can be defined as the threat an employee or a contractor will use their authorized access to, wittingly or unwittingly, do harm to an organization’s security. Certainly, as organizations become ...
Cloud Misconfigurations Threaten Cloud Migration
If we've learned one thing during the COVID-19 pandemic, it's that digital-native business models are essential to survival. That means cloud adoption is more important than ever before. Research shows that the ...
