IT Security
Summit Highlights Open Source Software Security Progress
The OpenSSF hosted a Secure Open Source Software (SOSS) Summit 2023 event during which it made available a Secure Open Source Software Vision Brief 2023 ...
Survey Surfaces Spike in Generative AI Usage Across IT
A survey of DevOps and SecOps leaders found nearly all are making use of generative artificial intelligence (AI) ...
Gremlin Adds Detected Risk Tool to Chaos Engineering Service
Gremlin's risk detection capability in its chaos engineering service automatically identifies issues that could cause outages along with recommendations to resolve them ...
Styra Makes Source Code Available for Enterprise Edition of OPA
Styra is making the Open Policy Agent (OPA) enterprise code available under a license that enables IT teams to modify or change the underlying code as they see fit ...
Snyk Survey: AI Generating More Vulnerabilities in Code
Mike Vizard | | appsec, artificial intelligence, generative AI, secure coding, Snyk, software securityA Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox ...
Extending the GitOps Pipeline: DevSecOps and Trusted Application Delivery
Joydip Kanjilal | | application delivery, devsecops, gitops, software security, supply chain security, trusted application deliveryThe fusion of DevSecOps and trusted application delivery can extend the GitOps pipeline and add business value ...
Palo Alto Networks Extends CNAPP to CI/CD Platforms
Palo Alto Networks' CNAPP now includes the ability to secure continuous integration/continuous delivery (CI/CD) platforms ...
New Relic Adds App Security Testing Tool to Observability Platform
New Relic made available a public preview of an application security testing tool that will be integrated into its observability platform ...
Postman Acquires Akita Software to Gain API Observability
Postman has acquired Akita Software to gain access to a platform for monitoring and observing application programming interfaces (APIs) ...
Shift Left With DAST: Dynamic Testing in the CI/CD Pipeline
By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss ...
JFrog Adds Curation Capability for Open Source Software Components
JFrog is adding a curation capability for open source software that will use metadata generated by binaries to identify malicious packages and software components with licensing issues ...
Bionic Extends Application Security Posture Management Platform
Bionic this week added a pair of tools to its application security posture management (ASPM) platform that make it simpler to triage threats based on severity and attach a risk score. Josh ...
