Tag: software development security
Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable
Jeff Burt | | Aqua Security Trivy, CI/CD cyberthreats, exposed secrets, GitHub Actions, IANS Research, malicious code, microsoft, OWASP Top 10, remote code execution, software development security, software supply chain attacks, software vulnerabilities, TenableA critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and gain access to secrets, ...
Code Quality and Security Risks of AI-Generated CodeÂ
Joydip Kanjilal | | AI attack surface, AI code security, AI coding assistants, AI development tools, AI model limitations, AI security challenges, AI training data vulnerabilities, AI-generated code, AI-powered development risks, automated code review, ChatGPT code generation, CI/CD security scanning, code quality risks, code security best practices, dependency risks, developer awareness, GitHub Copilot risks, hallucinated code, human-led code review, inefficient algorithms, insecure AI code, insecure code patterns, poor code maintainability, secure coding practices, software development security, spaghetti code, technical debt from AI toolsAI-powered tools and coding assistants have become popular and widely used among software developers for several reasons. They promise to deliver not only speed and comfort but also a tool for filling ...
