Featured Article
Top 10 open source projects hit by HTTP/2 'Rapid Reset' zero-day
How the SEC charges against SolarWinds highlight the cybersecurity liability of software companies
5 minute read time
Read about how the Securities and Exchange Commission charged SolarWinds and its chief information security officer for violating federal securities laws
Read More...
White House National Cybersecurity Strategy: Landmark action for a critical threat
5 minute read time
The Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment.
Read More...
Major government attack highlights how Log4j is still unresolved
4 minute read time
Despite all the attention and effort so far this year, this open source vulnerability found a it’s first major victim in multiple U.S. State governments.
Read More...
How Much Should the Federal Government Worry About Log4j?
7 minute read time
As the world worries about Log4j exploit, we look at how the US Federal Government is responding - and how worried it should be about this vulnerability.
Read More...
What Does NIST’s Definition of Critical Software Mean to You?
3 minute read time
NIST's definition of Critical Software in relation to the 2021 Cybersecurity Executive Order may seem broad, but its immediate implementation is limited.
Read More...
How Does Securing the Software Supply Chain Fit the DoD CIO Zero Trust Architecture?
8 minute read time
Curious how the DoD Zero Trust Architecture relates to secure development and protecting your software supply chain? We're breaking that down for you.
Read More...
SBOM – From the Idea of Transparency to the Reality of Code
4 minute read time
Allan Friedman from the NTIA has been working on SBOM standards in government and industry, for years. He spoke at ELEVATE 2021 about their status and future.
Read More...
What is Dependency Confusion and Why Does it Matter in the Federal Sector?
8 minute read time
Developers in the federal space are not immune from dependency confusion attacks.
Read More...
Katie Arrington discusses making development move at the speed of relevance
2 minute read time
Katie Arrington, CISO for the Office of the Under Secretary of Defense for Acquisition, recently discussed DevSecOps in the federal government and how the DoD is tackling key issues.
Read More...