DevSecOps

Secrets in GitHub reached 10 million occurrences last year,  an increase of 67% from 2021. The  historical high poses a significant threat to the software supply chain.

Why continued flaws in code development has made container security a national security issue.

Looking at topics around go-to-market strategy and product management, including: how building products is unique in cybersecurity compared to other industries, what is product-led growth and what shape it takes in security, and how to do it right. Touching on the broader and adjacent topics of writing, supporting cybersecurity startups, investing,...

Organizations need to insist that partners use least privilege access and work with companies that take teaching users about social engineering and overall security posture seriously.

Tech clutter and security debt can build up during software development and result in insecure, buggy apps. Here's how to use next-generation DAST tools and best development practices to reduce the noise and the risks.

TechRepublic reports that known vulnerabilities, legitimate package compromise, and name confusion attacks have been cited as the three main security risks facing open-source software this year.

False positives, misconfigurations and other "noise" can distract DevSecOps teams from attending to real vulnerabilities, which in turn leads to a buildup of security debt and ultimately unsafe software.

Many industry professionals viewed the Biden administration’s cybersecurity strategy as a positive step, but warned of the investment that will be needed to carry it out.