Survey: Widespread Inability to Remediate App Vulnerabilities
A survey found only 20% of IT and security professionals are confident in their ability to detect a vulnerability before an app is released.
Mobb Extends DevSecOps Reach of Tool to Generate Patches
Mobb added an ability to instantly surface patches for vulnerabilities at the time when code is being committed during a DevSecOps workflow.
AWS re:Invent 2023: Cloud Development Environments
At AWS re:Invent 2023, Shira Rubinoff talks with Rob Whiteley about Coder’s cloud development environment.
Shared Responsibility? Yeah.
Don MacVittie reminds us that the shared responsibility model was really cloud vendors telling us that we still have to protect our apps, no matter where they’re deployed.
KubeCon: DevSecOps and Generative AI
At KubeCon NA 2023, Alan Shimel talks with David DeSanto from GitLab about the potential for generative AI in DevSecOps.
From Machine Learning to DevSecOps: Six DevOps Trends for 2024
Here are six distinct technology trends that are poised to be particularly influential for DevOps in the new year.
What Will DevOps Look Like in 2024?
As the technology industry prepares for 2024, it’s clear that innovation and adaptation will be the keys to success in DevOps.
Vulnerability Management for DevOps Teams: A Practical Guide
The goal of vulnerability management is to close the gap between discovery and resolution, thereby minimizing the window of opportunity for potential cyberattacks.
Synopsys Report Sees Steady Application Security Gains
An analysis of the security automation practices of 130 organizations published by Synopsys suggests significant progress toward securing software supply chains.
How Encryption Innovation Will Power Cloud Privacy for Developers in 2024
With new encryption technologies rapidly advancing, developers can ensure their applications are secure.
Is SASE the DevSecOps of Infrastructure Management?
The strategic resemblance between the philosophy behind secure access service edge (SASE) and DevSecOps is uncanny.
CISA, NSA Issue Supply Chain Security Guidance Report
The NSA, ODNI and CISA have issued guidance to assist software developers and suppliers in shoring up software integrity and security.
Where to Start With Secure Design – Tips for Developers
Designing secure software is an increasingly hot topic, and for good reason. In recent weeks, we’ve seen a global effort from governments and cybersecurity agencies to encourage security by design through new guidance and changes to procurement rules. During the G7 in May, the QUAD nations (Australia, India, Japan and the United States) released a […]
Elastic Previews Unified Query Language for Search Platform
Elastic this week previewed a standard query language that can be used across its portfolio to streamline investigations into IT and cybersecurity events.
Survey Surfaces Software Supply Chain Security Challenges
While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal.
Transitioning Legacy Systems to DevOps: The XDR Support Paradigm
While companies are keen to leverage DevOps’ benefits, the transition from legacy systems can be fraught with challenges.
Backslash ASPM Platform Prioritizes DevSecOps Efforts
Backslash announced general availability of an ASPM platform that identifies and prioritizes vulnerabilities based on ease of exploitation.
Software Deployment Security: Risks and Best Practices
In an era where software is at the heart of every business, deploying applications securely and efficiently has never been more critical.
Digital.ai Update Extends Scope and Reach of DevSecOps Platform
A Denali update to Digital.ai’s DevSecOps platform promises to simplify integration of custom AI models with those developed by the company.
OpsMX Adds Deployment Firewall to Ensure Compliance
OpsMx has added a deployment firewall to its Deploy Shield portfolio for securing CI/CD platforms.
Survey Sees Spike in Untested Code Leading to a DevOps Crisis
A Sauce Labs survey found many developers admitted they pushed code into a production environment without testing.
3 Steps to Secure Your CI/CD Pipelines
Palo Alto Networks’ Daniel Krivelevich shares a general three-step framework organizations can use to secure the CI/CD pipeline and surrounding areas.
What DevOps Teams Should Know About Phishing and the Supply Chain
DevOps engineers are prime targets for phishing as cybercriminals look to infiltrate and disrupt the software supply chain.