DevSecOps
Snyk Acquires Helios to Extend Reach of ASPM Platform
With its Helios acquisition, Snyk plans to add an ability to capture application runtime data to extend the capabilities of its ASPM platform ...
5 Security Threats DevOps Teams Should Know
Gilad David Maayan | | application security, code scanning, devops security, devsecops, network filteringDevOps security (DevSecOps) is about breaking down silos and promoting open collaboration across teams ...
Survey: Widespread Inability to Remediate App Vulnerabilities
Mike Vizard | | application security, appsec, developer training, devsecops, Secure Software, Security JourneyA survey found only 20% of IT and security professionals are confident in their ability to detect a vulnerability before an app is released ...
Venafi Adds Ability to Prevent Unauthorized Code From Running
Venafi added an ability to prevent unauthorized code from running in IT environments that make use of its machine identity management platform ...
Mobb Extends DevSecOps Reach of Tool to Generate Patches
Mobb added an ability to instantly surface patches for vulnerabilities at the time when code is being committed during a DevSecOps workflow ...
Legit Security Applies AI to Detect Vulnerable Application Secrets
Mike Vizard | | ai, application security, artificial intelligence, code scanning, Legit Security, secrets managementLegit Security expanded the scope of its ASPM platform to make use of AI to discover vulnerable application secrets more accurately ...
From Reaction to Robots: Riding the AI Wave in 2024
Pieter Danhieux | | ai, artificial intelligence, coding, developer, regulations, secure-by-design, softwareInvestment in security-aware developers and collaboration between them and AppSec teams should be a driving force in 2024 ...
Checkmarx Report Details Havoc Caused by ‘Everything’ Package on NPM Registry
A Checkmarx report details an 'Everything' package distributed via the NPM registry that cripples any machine used to download it ...
KubeCon: DevSecOps and Generative AI
At KubeCon NA 2023, Alan Shimel talks with David DeSanto from GitLab about the potential for generative AI in DevSecOps ...
From Machine Learning to DevSecOps: Six DevOps Trends for 2024
Here are six distinct technology trends that are poised to be particularly influential for DevOps in the new year ...
Sonar Adds Secrets Detection to Code Analysis Portfolio
Sonar has added a secrets detection capability to its portfolio of tools for analyzing code and DevOps workflows ...
RBAC For Your CI/CD Pipeline: Why and How
By implementing RBAC in your CI/CD pipeline, you can help ensure secure and efficient operations ...
