Traditional AppSec Code Halts Kill DevOps Release Cycles
In recent years, the application security (AppSec) field has not advanced as rapidly as the software development discipline. While developers are under constant pressure to push code, legacy security tools inhibit their ...
Myth Busting in DevSecOps
Larry Maccherone leads the DevSecOps efforts at Comcast. In this episode of DevSecOps: The Good, The Bad, and The Ugly, he busts some common DevSecOps myths and shares more about his DevSecOps ...
A Compare-and-Contrast Between Next-Gen SIEM and SOAR
(The following is a guest post written by Alissa Knight, an ethical hacker, entrepreneur and author.) The average lifespan of... The post A Compare-and-Contrast Between Next-Gen SIEM and SOAR appeared first on ...
The World Bank Group’s Cloud Journey With DevSecOps
Editor's Note: We are hosting DevSecOps Leadership Forum virtual events. Register to hear directly from leaders in London and North America. In this post, we cover what William Zhang, Andy Gao, and ...
Secrets, Security Insights and APIs!
Secrets, Security Insights, and APIs!ShiftLeft Inspect can now detect “hardcoded secrets” (across all languages), and provide “security insights” into your JavaScript code. ShiftLeft Inspect has also released a new version of API ...
The Science of Compliance: Early Code to Secure Your Node
This is a summary of Judy Johnson’s talk “The Science of Compliance: Early Code to Secure Your Node”. Watch the entire presentation below. We’re here to talk about the science of compliance ...
Continuous Contextual Authentication: Cybersecurity and Identity Converge in a Hybrid-cloud World
Authentication and authorization are broken. As an industry we’ve known this for a long time and the notion routinely emerges as “death of the password.” One might blame it on the definitions ...
Dev + Sec + Ops != DevSecOps
Dev + Sec + Ops ! = DevSecOpsDevSecOps formulaHistorically, security vendors and code scientists around the world have been looking for a single universal formula to represent the notion of DevSecOps.In my ...
The Challenge of Managing Identities in a Cloud-y IT Environment
In the era of DevOps, organizations must ensure their identity assurance strategy is ready to keep pace with the demands of cloud infrastructure ...
Making Everyone Visible in Tech
Jaclyn Damiano, Director of Digital Operations at a large telecommunications firm, talks with Sonatype's Justin Miller about raising the visibility of diversity within teams. Her research shows that there is still a ...
