DevOps Security Metrics
In this article, we explore key metrics that can help bridge the gap between the speed of DevOps processes and the essential security requirements needed to protect systems effectively.
CISA Pushes Steps to Better Secure Software and Product Designs
The country’s top cybersecurity agency is urging developers to take steps to ensure the software they’re building and the products they roll out are secure and protect end users. The Cybersecurity and Infrastructure Security Agency (CISA) this week rolled out a series of recommendations that it wants businesses and critical infrastructure organizations to adopt to […]
Sonar Acquires Tidelift to Extend DevSecOps Reach Into Open Source Software
Sonar today revealed it has agreed to acquire Tidelift to gain access to third-party open-source code that it plans to integrate into its static code analysis tools.
DefectDojo Adds Ability to Normalize DevSecOps Data to ASPM Platform
DefectDojo today added a universal parser to its application security posture management platform (ASPM) that makes it possible to normalize data ingested from any DevSecOps tools and platforms that expose data in a JSON or XML format.
How an Effective AppSec Program Shifts Your Teams From Fixing to Building
Development teams are under growing pressure to build cutting-edge applications with shorter development lifecycles. However, they are often slowed down by the growing burden of fixing security vulnerabilities. Ineffective application security processes mean these teams can spend more time firefighting than building, diverting focus from their primary objective: Delivering innovative, high-performance software. Yet, healthy security […]
Microsoft Enlists Endor Labs to Integrate SCA Tool with CNAPP
Microsoft has tapped Endor Labs to incorporate a software composition analysis (SCA) tool into its cloud-native application protection platform (CNAPP).
Checkmarx Extends DevSecOps Reach to Repository Security and Secrets Discovery
Checkmarx this week extended the scope of its ability to protect software supply chains with tools that access how secure a repository is and find where application secrets have been shared in a way that is not secure. Ori Bendet, vice president of product management for Checkmarx, said the Repository Health and Secrets Detection tools […]
Four Steps to Balance Agility and Security in DevSecOps
Balancing agility and security in DevSecOps is achievable with the right mix of automation, collaboration and continuous feedback. By embedding security into agile processes, organizations can deliver software that is both fast and secure, meeting the demands of today’s fast-paced tech environment.
Update to Open Source WhiteRabbitNeo Project Brings Smarter AI to DevSecOps
Kindo today revealed that WhiteRabbitNeo, an open-source DevSecOps platform, has been updated to take advantage of improved large language models (LLMs) that generate more accurate outputs when resolving prompts related to offensive cybersecurity, surfacing remediations for potential threats and integrating threat intelligence and vulnerability data.
AI Will Soon Automate DevSecOps Governance
The role cybersecurity teams play in ensuring applications are secure is about to become a lot more proactive in the age of artificial intelligence (AI).
Prime Security to Apply AI Guardrails to DevSecOps Workflows
Prime Security today emerged from stealth to make available a beta version of a platform that leverages artificial intelligence (AI) to ensure the appropriate guardrails are being followed as software is developed.
Legit Security Adds Application Security Rating Scorecards to ASPM Platform
Legit Security today added an ability to rate the level of software security that has been attained to its application security posture management (ASPM) platform.
Elevating DevOps Security: Why Integrating Threat Modeling Transforms Pentesting
Do not stop at compliance — embrace threat-driven pentesting and build a security posture that is ready for the real-world threats your organization faces.
Automating Web Application Security Testing to Combat Cyber Threats
Despite the hundreds of exposed web applications and APIs in our attack surfaces, many assets remain dangerously untested and vulnerable to cyberattacks.
Leading the Charge: C-Suite’s Role in Cultivating DevOps and DevSecOps Culture
As the digital frontier evolves, it is becoming imperative for C-suite executives to cultivate a robust DevOps and DevSecOps culture.
JFrog CEO: Developers Need to Adapt to AI to Keep Their Jobs
JFrog CEO Shlomi Ben Haim told attendees of the company’s swampUP 2024 conference that unless application developers adapt their jobs are indeed at risk because of the rise of generative artificial intelligence (AI).
Research on the Human/Machine Frontier: Unleashing Generative AI in Software Engineering
GAI is poised to revolutionize software engineering. Having diverse perspectives and insights from across the many roles of the SDLC is crucial to understanding the evolving landscape.
The Rising Cost of Digital Incidents: Understanding and Mitigating Outage Impact
With a mean resolution time of 175 minutes, each customer-impacting digital incident costs both time and money. The industry needs to reset and revisit current processes so we can evolve and change the trajectory.
CISA: Critical Jenkins Flaw Exploited in Ransomware Attacks
The security vulnerability in the popular open-source development tool helps threat actors gain initial access into victims’ systems.
Changing the Face of Software Development Security: CodeOps
CodeOps and GenAI are aligned: CodeOps treats code produced using GenAI as yet another source of code and focuses on solving the security and discoverability problems inherent in the reuse of existing assets.
Breaking Free from Ransomware: Securing Your CI/CD Against RaaS
For developers, few things are more precious than their codebase. Yet, a chilling trend is emerging: Ransomware-as-a-service (RaaS) attacks targeting CI/CD pipelines, holding valuable code hostage.
AppSec Teams, DevOps Teams Facing Security Strain
https://devops.com/appsec-in-the-cloud-what-devops-teams-should-know/
White House to Spend $11 Million to Study Open Source Software Use
Hardening the security around open source software has been a key part of the White House’s larger cybersecurity efforts since President Biden released his executive order for improving the United States’ security posture in May 2021, only months after taking office. Now the Biden Administration and the Department of Homeland Security (DHS) are putting $11 […]