DevSecOps
Building Trust Into Your Product by Design
In today’s world, every tool, every solution and every technology has the potential to do both good and bad. Good, if used according to the way it was designed, but bad if ...
DevSecOps May Be Key to Prevent Data Leaks
Frank Ohlhorst | | APIs, application development, continuous testing, data leakage, devops, devsecopsData leakage has become something of a norm in the digital realm, despite the fact that cybersecurity budgets are growing and more engineers are assigned to these very issues. Nowhere does this ...
DevSecOps Implementation: Patch Management
Patch management has been a thorn in IT’s side for decades. While it is undeniably necessary for security and stability purposes, the staggering array of patches that are available make managing them ...
ZeroNorth Adds Analytics App to Advance DevSecOps
ZeroNorth today added an Advanced AppSec Risk Analytics module to its platform for orchestrating DevSecOps processes. John Worrall, ZeroNorth CEO, said the analytics tool pulls vulnerability data generated by a variety of ...
Rewind Acquires BackHub to Protect GitHub Repositories
Rewind, a provider of a software-as-a-service (SaaS) platform for backing up cloud services, today announced it has acquired BackHub to gain control of a platform for backing up GitHub repositories. Based in ...
Survey Shows DevSecOps Progress in Larger Organizations
A survey of 250 U.S. and UK large enterprises with more $1 billion in revenue conducted by Security Compass, a provider of a platform for automating security tasks as application are developed, ...
BluBracket Community Edition of Secrets Discovery Tool now Available
BluBracket today announced general availability of a community edition of a tool that employs machine learning algorithms to discover passwords, tokens and other security vulnerabilities in code. Prakash Linga, BluBracket's CEO, said ...
CNCF Graduates Open Policy Agent Project to Manage Compliance as Code
The Cloud Native Computing Foundation (CNCF) announced this week that the Open Policy Agent (OPA) project, which many IT teams are employing to manage compliance as code, has officially graduated. Torin Sandall, ...
AppDynamics Partners With Cisco to Secure Application Runtimes
AppDynamics today announced its agent software, which it provides as part of its observability platform, now has the ability to enforce application security policies. Developed in collaboration with the security business unit ...
OpenAPI Specification: Perception vs. Reality
The OpenAPI Specification (OAS) (formerly known as the Swagger specification) provides a way to describe and document REST APIs and their components. It includes details on endpoints, their operations, parameters needed for ...
Tidelift Secures Open Source Software Supply Chains
Tidelift today announced the general availability of a platform dubbed Tidelift catalogs, through which enterprise IT organizations can more effectively manage their open source supply chains. Donald Fischer, Tidelift's CEO, says the ...
DevSecOps Implementation: EDR/XDR
We mentioned host intrusion detection and network intrusion detection in an earlier blog, and mentioned firewalls a couple of times in passing. Let’s delve a bit into the history to understand how ...
