Security Organizations Need to Start Thinking Like Developers
2 minute read time
Developers must think more securely, and security teams need to learn more development skills. Cross-discipline awareness strengthens software development.
Read More...
Free Software, But No Free Lunch
2 minute read time
Today's threat surface is the software itself. How can Fortune 100 companies and others protect themselves? One security practice is counterintuitive.
Read More...
PyPi 'Cheese Shop' Malware Illustrates Software Supply Chain Risk Vector
3 minute read time
Malicious actors circumvented the PyPI package repo manager, a classic case demonstrating why understanding open source code dependencies is critical.
Read More...
Achieving a Managed State Model For Your Software Supply Chain
3 minute read time
Secure software development processes share attributes with other human endeavors such as cooking, reading, and sports, says Santi Mulukutla of Sonatype.
Read More...
DevSecOps: Security at the Speed of DevOps
3 minute read time
Larry Maccherone of Comcast shares his DevSecOps Manifesto and strategies he's used to foster the cultural change necessary to implement DevSecOps.
Read More...
The latest attempt at a cryptocurrency heist demonstrates how open source software components are used throughout the cryptocurrency ecosystem.
Read More...
From Burping to Flying - Red Teaming with Nexus at Intuit
3 minute read time
Security is too important to leave out of DevOps. Learn why, and how to unite the two, from Shannon Lietz's 2018 Nexus User Conference session.
Read More...
Alexa: What’s the Future of Cyber Security?
5 minute read time
The software supply chain connects everyone and everything but attacks to this connected web can be blatant and overt, with damaging consequences - especially.
Read More...
Malicious Attacks On Open Source Are Going to Get Worse: Developers Need to Take Notice
2 minute read time
Bad actors have recognized the power of open source and are now beginning to create their own attack opportunities.
Read More...