Tag: security
Four Secure Coding Best Practices for Mobile Apps
Jorge Damian | | Android, application, coding, cryptography, developers, iOS, mobile, NowSecure, securityMobile apps have become the primary point of innovation for many companies, and skilled mobile developers are in high demand. The business asks developers to innovate fast using the latest smartphone features ...
Preparing Your Android App for an Independent Security Review
As of July 20, 2022, Android developers publishing new or updated mobile apps in Google Play must declare how their apps collect, share and secure data. The new Google Play Data safety ...
Myth Busting: 5 Misconceptions About FinOps
Over the years, moves to the cloud have happened in several different ways and at various speeds. The reality is that today most enterprises are spending massive amounts on their cloud environments, ...
Lock Down Your Toolchain
We have done amazing things with Agile and DevOps, increasing IT responsiveness to levels that most people would not have believed and our business counterparts only dreamed of even a decade ago ...
Resolving CI/CD Permissions Issues to Address Delivery Needs
Security concerns and DevOps process issues can stall CI/CD operations. DevOps teams are familiar with the frustrations plaguing their pipelines, whether regulatory or process-based. Operational hurdles are all too common in DevOps ...
What the New OWASP Top 10 Changes Mean to Devs
Pankaj Gupta | | application security, AppSEcurity, devops, log4j, OWASP, security, ShiftLeft, SSRF, WAFThe open web application security project (OWASP) recently updated its top 10 list of the most critical security risks to web applications after four years. It represents the most radical shake-up since ...
At Some Point, We’ve Shifted Too Far Left
Those of us involved in DevOps have a tendency to see the world with blinders on. It is rather easy to fall into the “If all you have is a hammer, everything ...
How to Securely Manage Secrets Within Jenkins
The continuous integration and continuous delivery (CI/CD) pipeline is a fundamental component of the software delivery process for DevOps teams. The pipeline leverages automation and continuous monitoring to enable seamless delivery of ...
Why is Security Still in the Way? A Look at DevSecOps Right Now
Jenn Jeffers | | automation, CI/CD, Cybersecurity, devops, devsecops, digital transformation, security, software developmentAccording to industry trend reports for 2022, DevSecOps is now considered to be one of the most effective approaches to building software quickly and securely. This effort, of course, means development, security ...
When DevOps-as-a-Service (DaaS) Meets Security
Jenn Jeffers | | application development, application security, appsec, DaaS, devops, devops adoption, devops culture, devsecops, digital transformation, security, software developmentOne of the most recent IT methodologies to be offered as a service is DevOps, a cultural and practical approach that brings development and operations teams together under one umbrella of work ...
DevSecOps: Realities of Policy Management
Policy management is essential to scale cloud environments and is key to secure DevOps practices. It enables organizations to manage policies put in place that secure the cloud environment, ensure Kubernetes configurations ...
MDR for DevSecOps: How Managed Security Can Help You Shift Left
What is managed detection and response (MDR)? Managed detection and response (MDR) is an outsourced service that helps organizations detect threats on endpoints, respond to them and carry out proactive threat hunting ...
