White House National Cybersecurity Strategy: Landmark Action for a Critical Threat
5 minute read time
The Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment.
Read More...
Major Government Attack Highlights How Log4j is Still Unresolved
4 minute read time
Despite all the attention and effort so far this year, this open source vulnerability found a it’s first major victim in multiple U.S. State governments.
Read More...
What Does NIST’s Definition of Critical Software Mean to You?
3 minute read time
NIST's definition of Critical Software in relation to the 2021 Cybersecurity Executive Order may seem broad, but its immediate implementation is limited.
Read More...
SBOM – From the Idea of Transparency to the Reality of Code
4 minute read time
Allan Friedman from the NTIA has been working on SBOM standards in government and industry, for years. He spoke at ELEVATE 2021 about their status and future.
Read More...
Katie Arrington discusses making development move at the speed of relevance
2 minute read time
Katie Arrington, CISO for the Office of the Under Secretary of Defense for Acquisition, recently discussed DevSecOps in the federal government and how the DoD is tackling key issues.
Read More...
NIST: Adopt a Secure Software Development Framework (SSDF) to Mitigate Risk of Software Vulnerabilities
2 minute read time
NIST recommends a SSDF framework to assess open source component cybersecurity risks, including an SBOM and automated security controls in the SDLC.
Read More...
Six Memorable Sessions With Government DevSecOp Leaders: What We Learned
4 minute read time
Chris Roberts, Ron Ross, Katie Arrington, Nicolas Chaillan, and Lauren Knausenberger join Sonatype leadership to discuss security trends in the government.
Read More...
Federal DevSecOps Leaders: It's Time to Join The Conversation
3 minute read time
The DevSecOps Government Leadership Forum, typically hosted in Washington, D.C., will be hosted online so government leaders everywhere can participate.
Read More...
Department of Defense DevSecOps Journey
3 minute read time
The DevSecOps stack is open source and open to the public. Everything is infrastructure as code and can run on any environment, leveraging Kubernetes.
Read More...