IT Security

MLOps, JFrog, Venafi MLOps businesses ML machine learning MLOps modelsGreat Resignation machine learning Eggplant testing

Venafi Adds Ability to Prevent Unauthorized Code From Running

Mike Vizard | January 24, 2024 | automation, code security, machine identity, runtime protection, Venafi

Venafi added an ability to prevent unauthorized code from running in IT environments that make use of its machine identity management platform ...

AI, AI-powered, DevSecOps, zero-trust, Mobb Checkmarx DevSecOps security

Mobb Extends DevSecOps Reach of Tool to Generate Patches

Mike Vizard | January 23, 2024 | devsecops, Mobb, patch management, secure code, security, workflow

Mobb added an ability to instantly surface patches for vulnerabilities at the time when code is being committed during a DevSecOps workflow ...

Legit Security syslogs HashiCorp Checkmarx Synopsys Cycode CodeLogic scanning Contrast Security secrets scan dynamic

Legit Security Applies AI to Detect Vulnerable Application Secrets

Mike Vizard | January 23, 2024 | ai, application security, artificial intelligence, code scanning, Legit Security, secrets management

Legit Security expanded the scope of its ASPM platform to make use of AI to discover vulnerable application secrets more accurately ...

CISA, secure by design, ReversingLabs, open-source, AI, cybersecurity, tooling, CISA Security Scribe ReversingLabs software supply chain cybersecurity - software supply chain security - risks - cyberattacks - Log4J - vulnerabilities

From Reaction to Robots: Riding the AI Wave in 2024

Pieter Danhieux | January 10, 2024 | ai, artificial intelligence, coding, developer, regulations, secure-by-design, software

Investment in security-aware developers and collaboration between them and AppSec teams should be a driving force in 2024 ...

Checkmarx Report Details Havoc Caused by ‘Everything’ Package on NPM Registry

Mike Vizard | January 5, 2024 | Checkmarx, denial of service, dependencies, NPM, Software Supply Chain Security

A Checkmarx report details an 'Everything' package distributed via the NPM registry that cripples any machine used to download it ...

Sonar Adds Secrets Detection to Code Analysis Portfolio

Mike Vizard | December 18, 2023 | code, IAM, Secrets, secrets management, Sonar, vulnerability

Sonar has added a secrets detection capability to its portfolio of tools for analyzing code and DevOps workflows ...

vulnerability shared responsibility One Identity

Vulnerability Management for DevOps Teams: A Practical Guide

Gilad David Maayan | December 7, 2023 | devsecops, Secure Software, software security, vulnerability, vulnerability management

The goal of vulnerability management is to close the gap between discovery and resolution, thereby minimizing the window of opportunity for potential cyberattacks ...

intelligent, applications, Synopsys supply chain intelligent application vulnerability DevOps open source software Red Hat Dynatrace automation analytics AI Red Hat

Synopsys Report Sees Steady Application Security Gains

Mike Vizard | December 5, 2023 | devsecops, security automation, Software Supply Chain, supply chain, Synopsys

An analysis of the security automation practices of 130 organizations published by Synopsys suggests significant progress toward securing software supply chains ...

OpenSSF warns of Open Source Social Engineering Threats

How Encryption Innovation Will Power Cloud Privacy for Developers in 2024

Andrei Stoian | December 1, 2023 | devsecops, encryption, fully homomorphic encryption, security, software security

With new encryption technologies rapidly advancing, developers can ensure their applications are secure ...

DAST, security, Veracode DAST platform engineering, DevOps, IT

Veracode Extends DAST Reach Left Toward Developers

Mike Vizard | November 28, 2023 | app testing, continuous testing, DAST, Dynamic Application Security Testing, Veracode

Veracode launched a version of its automated DAST tool, dubbed DAST Essentials, that is embedded within an IDE ...

Three Strategies for Reducing MTTD and MTTR as Outage Costs Spiral

Peter Pezaris | November 28, 2023 | apm, devops, metrics, MTTD, mttr, New Relic, observability, outages

In a business environment where most interactions with customers, suppliers and business partners are conducted digitally, downtime has become a problem and an existential threat ...