Checkmarx Report Details Havoc Caused by ‘Everything’ Package on NPM Registry
A Checkmarx report details an ‘Everything’ package distributed via the NPM registry that cripples any machine used to download it.
Sonar Adds Secrets Detection to Code Analysis Portfolio
Sonar has added a secrets detection capability to its portfolio of tools for analyzing code and DevOps workflows.
Vulnerability Management for DevOps Teams: A Practical Guide
The goal of vulnerability management is to close the gap between discovery and resolution, thereby minimizing the window of opportunity for potential cyberattacks.
Synopsys Report Sees Steady Application Security Gains
An analysis of the security automation practices of 130 organizations published by Synopsys suggests significant progress toward securing software supply chains.
How Encryption Innovation Will Power Cloud Privacy for Developers in 2024
With new encryption technologies rapidly advancing, developers can ensure their applications are secure.
Veracode Extends DAST Reach Left Toward Developers
Veracode launched a version of its automated DAST tool, dubbed DAST Essentials, that is embedded within an IDE.
Three Strategies for Reducing MTTD and MTTR as Outage Costs Spiral
In a business environment where most interactions with customers, suppliers and business partners are conducted digitally, downtime has become a problem and an existential threat.
Lineaje Allies With Persistent Systems on Open Source Software Remediation Service
Lineaje and Persistent Systems are providing a managed service for remediating open source vulnerabilities that leverages AI technologies.
Redgate Automates Pulling of Test Data From Production Databases
Redgate’s Test Data Management (TDM) tool eliminates manual tasks that previously inhibited testing and protects PII.
Elastic Previews Unified Query Language for Search Platform
Elastic this week previewed a standard query language that can be used across its portfolio to streamline investigations into IT and cybersecurity events.
Survey Surfaces Software Supply Chain Security Challenges
While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal.
Backslash ASPM Platform Prioritizes DevSecOps Efforts
Backslash announced general availability of an ASPM platform that identifies and prioritizes vulnerabilities based on ease of exploitation.
Software Deployment Security: Risks and Best Practices
In an era where software is at the heart of every business, deploying applications securely and efficiently has never been more critical.
OpsMX Adds Deployment Firewall to Ensure Compliance
OpsMx has added a deployment firewall to its Deploy Shield portfolio for securing CI/CD platforms.
Survey Sees Spike in Untested Code Leading to a DevOps Crisis
A Sauce Labs survey found many developers admitted they pushed code into a production environment without testing.
GitGuardian Adds Tool for Discovering Secrets in Public Repositories
GitGuardian added a tool that makes it possible for DevOps teams to search GitHub repos to determine if secrets have inadvertently found their way into other apps.
Pulumi Previews Tool to Integrate Secrets and Infrastructure Management
Pulumi previewed a tool that enables DevOps teams to unify environments, secrets and configuration (ESC) management.
ForAllSecure Streamlines Application Security Testing
ForAllSecure provided early access to dynamic SBOM generation and SCA validation capabilities within its Mayhem Security automated code and API testing tool.
Checkmarx Surfaces Threat to GitHub Repositories
Checkmarx reported that malicious actors have been able to compromise GitHub’s Dependabot, the free automated dependency management tool for software projects.
3 Steps to Secure Your CI/CD Pipelines
Palo Alto Networks’ Daniel Krivelevich shares a general three-step framework organizations can use to secure the CI/CD pipeline and surrounding areas.
Summit Highlights Open Source Software Security Progress
The OpenSSF hosted a Secure Open Source Software (SOSS) Summit 2023 event during which it made available a Secure Open Source Software Vision Brief 2023.
Survey Surfaces Spike in Generative AI Usage Across IT
A survey of DevOps and SecOps leaders found nearly all are making use of generative artificial intelligence (AI).
Gremlin Adds Detected Risk Tool to Chaos Engineering Service
Gremlin’s risk detection capability in its chaos engineering service automatically identifies issues that could cause outages along with recommendations to resolve them.