Tag: secure coding
Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog's API security platform is intended to encourage developers to adopt best practices to secure APIs ...
Snyk Survey: AI Generating More Vulnerabilities in Code
Mike Vizard | | appsec, artificial intelligence, generative AI, secure coding, Snyk, software security
A Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox ...
DevOps Security: Your Complete Checklist
Yoni Farin | | application development, checklist, devops, devsecops, secure coding, security, Software Supply Chain
In a fast-paced environment like DevOps, your security strategy needs to be even more agile. While moving fast is great for delivering application features and functionality, speed shouldn't come at the cost ...
GitGuardian Survey Surfaces Secrets Management Challenges
A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting that ...
Codenotary Previews Secure SBOM Creation Service
Codenotary today made available a preview of a centralized repository service for generating and storing software bills of materials (SBOMs) that makes it simpler to securely share them as necessary. Moshe Bar, ...
Cycode Adds ASOC Module to Streamline DevSecOps Workflows
Cycode has added a module to its platform for mapping metadata and events using graph technology that makes it simpler for application development and cybersecurity to consolidate alerts generated by their DevSevOps ...
5 Unusual Ways to Improve Code Quality
Code quality refers to how well-written and maintainable software code is. It encompasses factors such as readability, efficiency, scalability, reliability, maintainability and security. High code quality ensures that software is easy to ...
Will DevSecOps Replace the Security Operations Center?
Traditionally, a security operations center (SOC) is a physical facility where an organization performs information security activities. The SOC team analyzes and monitors the organization's security systems. A SOC aims to protect ...
What Developers Need for Software Security Success
Given today’s evolving threat landscape, organizations and businesses in every sector now have a critical need to produce secure software. Criminal gangs, professional attackers and hostile nation-states are employing advanced tactics designed ...
Avoiding Security Review Delays
In the summer of 2021, I had lunch with a senior security developer at one of Seattle's leading tech firms. Even though we were relaxed in the sunny and cool afternoon of ...
What GitHub’s 2FA Mandate Means for Devs Everywhere
Multifactor authentication (MFA) is becoming increasingly standard within software development organizations, with GitHub recently announcing that two-factor authentication (2FA) will be mandatory for all code contributors by the end of 2023. This ...
Managing Hardcoded Secrets to Shrink Your Attack Surface
The practice of hardcoding secrets—such as authentication credentials, passwords, API tokens and SSH Keys—as non-encrypted plain text into source code or scripts has been common in software development for many years. It ...
