U.S. Elections: Effectively Balancing Access and Security
For a Democratic Party desperate to unseat President Trump in November, the primary election process has been filled with large-scale technology failure, official miscalculations, voter annoyance and public embarrassment, not to mention ...
DevSecOps Delivered: Nexus IQ Google Chrome Extension
In this episode of DevSecOps Delivered, you'll learn how to use the Nexus IQ Chrome Extension to evaluate open source components in your browser. With the Nexus IQ Chrome extension you can: ...
Getting Your Security Program to Shift Left: Operationalizing Security Controls via DevSecOps
DevSecOps is a hot topic. It’s touted as a utopia where automation saves time and money while cutting risk and reducing dependencies. In reality, without effective oversight, DevSecOps leaves orphaned technologies, unmaintained ...
Can DevSecOps Cover Holes Created by Digital Transformation?
The success of DevSecOps is very much dependent on the understanding that the role isn’t only technical but also procedural. The post Can DevSecOps Cover Holes Created by Digital Transformation? appeared first ...
AppSec, the developer way: Transforming security from a “dirty word” to a common practice
In a world where one data breach is all it takes to destroy a business, only the prepared and vigilant ones that embrace security in their operations can prevent disaster. Yet, if ...
How GitOps Raises the Stakes for Application Security
The rise of GitOps comes from the industry’s increased adoption of Kubernetes. As organizations and teams shift towards Kubernetes, scaling their cluster management practices becomes imperative as teams and workloads grow in ...
Integrating Infrastructure as Code into a Continuous Delivery Pipeline
We’re here to talk about integrating infrastructure as code into a continuous delivery pipeline. We’ll start by defining infrastructure as code then explain some of the problems it solves. Defining Infrastructure as ...
What is SIEM? The Roadmap to a Better SOC
As the frequency and severity of data breaches continues to increase, and users become more concerned about privacy and the... The post What is SIEM? The Roadmap to a Better SOC appeared ...
Tanya Janca is “Big Fan of SCA” [VIDEO]
Tanya Janca, also known as SheHacksPurple, sat down with me on this episode of DevSecOps: The Good, The Bad, and The Ugly. Her new company teaches application security, DevSecOps, and cloud security ...
Was This Huawei’s Failed Attempt at a Linux Backdoor?
A Huawei employee submitted a large, buggy patch to the Linux kernel—apparently it contained a “trivially exploitable” security hole ...
