Snyk Adds Second ASPM Tool to Portfolio
Today, Snyk made available an edition of its application security posture management (ASPM) tool for assessing application risks that provides more context into how code has been written and its role within the application environment. Manoj Nair, chief product officer for Snyk, said Snyk AppRisk Pro leverages artificial intelligence (AI) and machine learning to provide […]
The Role of AI in Securing Software and Data Supply Chains
Expect attacks on the open source software supply chain to accelerate, with attackers automating attacks in common open source software projects and package managers.
Datadog DevSecOps Report Shines Spotlight on Java Security Issues
Datadog today published a State of DevSecOps report that finds 90% of Java services running in a production environment are vulnerable to one or more critical or high severity vulnerabilities introduced by a third-party library, versus an average of 47% for alternative programming languages. Based on an analysis of IT environments being monitored using the […]
From Chaos to Clarity: Streamlining DevSecOps in the Digital Era
Organizations need a scalable security orchestration framework that eliminates friction in DevSecOps workflows and drives efficiency in real-time.
DevSecOps: 5 Tips for Developing Better, Safer Apps
DevSecOps requires teams to collaborate and enable the organization to deliver safer applications to customers without compromising security.
JFrog Survey Surfaces Raft of DevSecOps Challenges
A JFrog survey found that 60% of IT professionals typically spend four days or more remediating application vulnerabilities in a given month.
Leveraging eBPF for DevSecOps
The applications for enhancing security observability with eBPF are vast, and it’s increasingly valuable for DevSecOps use cases.
appCD Launches Platform to Securely Provision Cloud Infrastructure
appCD’s platform analyzes an application about to be deployed and automatically generates the code to provision the required infrastructure.
Permiso Makes Open Source Tool to Identify Cloud Threats Available
Permiso today launched an open source tool dubbed CloudGrappler that surfaces indicators of compromise in cloud computing environments.
AISecOps: Expanding DevSecOps to Secure AI and ML
AISecOps, the application of DevSecOps principles to AI/ML and generative AI, means integrating security into models’ life cycles.
Survey Sees Limited DevSecOps Progress Being Made as Vulnerabilities Mount
A recent survey found that, on average, organizations have 55.5 security vulnerabilities each day in their remediation queue, with at least one critical.
Securing the DevOps Pipeline: Tools and Best Practices
Because of the critical nature of the DevOps pipeline, security is becoming a top priority. Here’s how to integrate DevSecOps.
Forget Shift Left: Why ‘No Shift’ is the Future of Software Innovation
A no shift strategy argues for developing and testing directly in production, bypassing the traditional dev-to-production delivery pipeline.
Why DevOps is Key to Software Supply Chain Security
Organizations can maintain their DevOps momentum while protecting the software supply chain by shifting security left.
Techstrong Research: Combatting CI/CD Security Anti-Patterns
Techstrong Research finds the imperative to secure the software supply chain and CI/CD pipelines is undeniable and urgent.
Squaring the Circle: How to Make Public APIs Private
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here’s how to stop them.
Legit Security Adds Sensors to Detect Usage of Gen AI Tools to Write Code
Legit Security updated its ASPM platform with the ability to detect when developers use generative AI tools to write code.
Survey: Cyberattacks Aimed at Software Supply Chains are Pervasive
A survey found the vast majority of respondents work for organizations that experienced a software supply chain incident in the past 12 months.
OpenText Extends Tool for Auditing Source Code Using Machine Learning
OpenText updated a static analysis code auditing tool using machine learning algorithms to provide deeper insights into on-premises IT environments.
Salesforce Adds Ability to Apply Custom Security Policies to APIs
Salesforce added the ability to customize API security policies to the Mulesoft Anypoint API management platform.
Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog’s API security platform is intended to encourage developers to adopt best practices to secure APIs.
OX Security Optimizes DevSecOps to Improve Application Security
OX Security updated its ASPM platform to enable DevSecOps teams to instantly identify applications with vulnerable code.
Diffblue Integrates Generative AI-Based Testing Platform With GitLab
Diffblue integrated its automated unit testing platform for Java with the DevSecOps platform from GitLab.