Backslash Security Extends Reach of Application Security Platform
Making the Backslash application security platform even more secure with news of added support as well as a revamped, simpler user interface.
No Country for No-Code: Are We Heading Towards a Wild West of Software Security?
The specter of an untrained employee creating applications is alarming: No-code/low-code platforms empower employees with no application security knowledge to develop programs that security teams don’t know exist.
DevSecOps: 5 Tips for Developing Better, Safer Apps
DevSecOps requires teams to collaborate and enable the organization to deliver safer applications to customers without compromising security.
JFrog Survey Surfaces Raft of DevSecOps Challenges
A JFrog survey found that 60% of IT professionals typically spend four days or more remediating application vulnerabilities in a given month.
Cycode Acquires Bearer to Extend ASPM Platform
Cycode has acquired Bearer, a provider of a set of tools for SAST, API discovery and identification of sensitive data.
Cycode Brings Generative AI to App Security Posture Management
Cycode’s generative AI capabilities in its ASPM platform make it simpler for DevSecOps teams to identify the root cause of vulnerabilities.
Veracode Report Shines Spotlight on Massive Application Security Debt
In an analysis of more than a million applications, Veracode found 42% contained flaws that remained unfixed for longer than a year.
Squaring the Circle: How to Make Public APIs Private
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here’s how to stop them.
GitGuardian Allies With CyberArk to Better Protect App Secrets
GitGuardian has allied with CyberArk to streamline secrets detection and management by making it easier to share insights.
Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog’s API security platform is intended to encourage developers to adopt best practices to secure APIs.
Snyk Acquires Helios to Extend Reach of ASPM Platform
With its Helios acquisition, Snyk plans to add an ability to capture application runtime data to extend the capabilities of its ASPM platform.
5 Security Threats DevOps Teams Should Know
DevOps security (DevSecOps) is about breaking down silos and promoting open collaboration across teams.
Survey: Widespread Inability to Remediate App Vulnerabilities
A survey found only 20% of IT and security professionals are confident in their ability to detect a vulnerability before an app is released.
Legit Security Applies AI to Detect Vulnerable Application Secrets
Legit Security expanded the scope of its ASPM platform to make use of AI to discover vulnerable application secrets more accurately.
2024: The Year of Testing
Now that AI has made advanced automation a fact, it is time to consider implementing the level of testing we always knew we should have.
Backslash ASPM Platform Prioritizes DevSecOps Efforts
Backslash announced general availability of an ASPM platform that identifies and prioritizes vulnerabilities based on ease of exploitation.
Fortifying the Castle: A Quest to Secure the SDLC
Securing the SDLC is a never-ending battle against hidden risks and formidable adversaries and requires security champions to share their wisdom.
Steady On. We Still Have a Job to Do
AI-generated change is not significantly different than the last couple decades where change has become IT’s constant companion.
Snyk Survey: AI Generating More Vulnerabilities in Code
A Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox.
New Relic Adds App Security Testing Tool to Observability Platform
New Relic made available a public preview of an application security testing tool that will be integrated into its observability platform.
Shift Left With DAST: Dynamic Testing in the CI/CD Pipeline
By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss.
Communicating Common Web App Security Threats to Developers
Shift left involves providing developers with the context they need to prioritize and remediate threats appropriately.
Bionic Extends Application Security Posture Management Platform
Bionic this week added a pair of tools to its application security posture management (ASPM) platform that make it simpler to triage threats based on severity and attach a risk score. Josh Cho, senior director of global systems engineering at Bionic, said the Bionic Signals and Business Risk Scoring tools ingest data from third-party security […]