DevSecOps
Cloud Migrations Demand Risk and Compliance Maturity
The COVID-19 pandemic brought undeniable disruptions for organizations and their employees whether business, personal or otherwise. Across the globe, businesses and governments alike were forced to try and manage these disruptions. For ...
Game On: Secure Coding Virtual Summit 2021
Veronica Haggar | | API security, application security, appsec, container security, cybersecurity event, devsecops, DevSecOps event, secure coding, threat modelingAgile organizations are looking for ways to win at security without slowing down their release cycles. That’s where DevSecOps comes in. The days of a hands-off security approach for developers are over ...
GitLab Releases Updates to CI/CD Platform
GitLab this week made available a 13.9 update that adds more than 60 new features and updated capabilities to its namesake open source continuous integration/continuous delivery (CI/CD) platform. Brian Glanz, a product ...
Application Security and Continuous Observability with DeepFactor
Mitch Ashley | | application security, appsec, continuous observability, DeepFactor, devsecops, observability, Observability-as-Code, TechStrong TV, TechStrongTVToday's modern applications are becoming increasingly complex and released more frequently than ever before, therefore increasing security, privacy and compliance risks. How do you identify the security and compliance risks hidden in ...
Engineering Practices Can Overcome DevOps Challenges
When I think about the challenges of DevOps transformations, I love the viewpoint expressed by Ryan Harmon, strategic accounts manager at Trace3: “DevOps is a complex maze that has many leaders frustrated ...
Protecting Data from Insider Threats
Manav Mital | | Cyral, devops teams, devsecops, infrastructure, policies-as-code, security as code, zero standing permissions“Insider threat” can be defined as the threat an employee or a contractor will use their authorized access to, wittingly or unwittingly, do harm to an organization’s security. Certainly, as organizations become ...
Cloud Misconfigurations Threaten Cloud Migration
If we've learned one thing during the COVID-19 pandemic, it's that digital-native business models are essential to survival. That means cloud adoption is more important than ever before. Research shows that the ...
Building Trust Into Your Product by Design
In today’s world, every tool, every solution and every technology has the potential to do both good and bad. Good, if used according to the way it was designed, but bad if ...
DevSecOps May Be Key to Prevent Data Leaks
Frank Ohlhorst | | APIs, application development, continuous testing, data leakage, devops, devsecopsData leakage has become something of a norm in the digital realm, despite the fact that cybersecurity budgets are growing and more engineers are assigned to these very issues. Nowhere does this ...
DevSecOps Implementation: Patch Management
Patch management has been a thorn in IT’s side for decades. While it is undeniably necessary for security and stability purposes, the staggering array of patches that are available make managing them ...
ZeroNorth Adds Analytics App to Advance DevSecOps
ZeroNorth today added an Advanced AppSec Risk Analytics module to its platform for orchestrating DevSecOps processes. John Worrall, ZeroNorth CEO, said the analytics tool pulls vulnerability data generated by a variety of ...
