IT Security
Snyk Survey: AI Generating More Vulnerabilities in Code
Mike Vizard | | appsec, artificial intelligence, generative AI, secure coding, Snyk, software securityA Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox ...
Extending the GitOps Pipeline: DevSecOps and Trusted Application Delivery
Joydip Kanjilal | | application delivery, devsecops, gitops, software security, supply chain security, trusted application deliveryThe fusion of DevSecOps and trusted application delivery can extend the GitOps pipeline and add business value ...
Palo Alto Networks Extends CNAPP to CI/CD Platforms
Palo Alto Networks' CNAPP now includes the ability to secure continuous integration/continuous delivery (CI/CD) platforms ...
New Relic Adds App Security Testing Tool to Observability Platform
New Relic made available a public preview of an application security testing tool that will be integrated into its observability platform ...
Postman Acquires Akita Software to Gain API Observability
Postman has acquired Akita Software to gain access to a platform for monitoring and observing application programming interfaces (APIs) ...
Shift Left With DAST: Dynamic Testing in the CI/CD Pipeline
By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss ...
JFrog Adds Curation Capability for Open Source Software Components
JFrog is adding a curation capability for open source software that will use metadata generated by binaries to identify malicious packages and software components with licensing issues ...
Bionic Extends Application Security Posture Management Platform
Bionic this week added a pair of tools to its application security posture management (ASPM) platform that make it simpler to triage threats based on severity and attach a risk score. Josh ...
How to Avoid Risk When Using Multiple Low-Code Platforms
Bill Doerrfeld | | application security, citizen development, devops, Low Code, Low-Code/No-Code, SaaSOrganizations are still increasing their use of low-code/no-code (LCNC). But this adoption isn't always consolidated around one tool—frequently, multiple low-code/no-code platforms are used under the same roof. In fact, Gartner predicts that ...
Cycode Leverages eBPF to Secure CI/CD Pipelines
Cycode today added a Cimon extension to its application security platform that uses extended Berkeley Packet Filtering (eBPF) to thwart cyberattacks against continuous integration/continuous delivery (CI/CD) pipelines. Alex Ilgayev, head of security ...
Snyk to Add ASPM Platform via Enso Security Acquisition
Mike Vizard | | Application Security Posture Management, ASPM, Cloud Security, devsecops, Enso Security, SnykSnyk this week announced it plans to acquire Enso Security, a provider of an application security posture management (ASPM) solution that tracks events and analyzes metadata collected from DevOps and security tools ...
DigiCert Allies With ReversingLabs to Secure Software Supply Chains
DigiCert today announced it has allied with ReversingLabs to integrate binary analysis and threat detection capabilities with a code signing service it provides. Deepika Chauhan, chief product officer for DigiCert, said the ...
