#application security
#application security
[ follow ]
#application-security #cybersecurity #devsecops #software-development #vulnerability-management #vibe-coding
fromTheregister
1 week agoAI code assistants improve production of security problems
AI-assisted developers produced three to four times more code than their unassisted peers, but also generated ten times more security issues. "Security issues" here doesn't mean exploitable vulnerabilities; rather, it covers a broad set of application risks, including added open source dependencies, insecure code patterns, exposed secrets, and cloud misconfigurations. As of June 2025, AI-generated code had introduced over 10,000 new "security findings" per month in Apiiro's repository data set, representing a 10x increase from December 2024, the biz said.
Artificial intelligence
fromThe Hacker News
3 weeks agoWebinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec
But hidden in there is a tiny flaw that explodes into a huge problem once it hits the cloud. Next thing you know, hackers are in, and your company is dealing with a mess that costs millions. Scary, right? In 2025, the average data breach hits businesses with a whopping $4.44 million bill globally. And guess what? A big chunk of these headaches comes from app security slip-ups, like web attacks that snag credentials and wreak havoc.
Information security
fromInfoWorld
3 weeks agoBroadcom and Canonical expand partnership, promising accelerated innovation
"Canonical is the number-one Cloud OS provider in the market with the Ubuntu containers, and VMware by Broadcom, with our VCF Foundation, is the number-one private cloud platform," said Prashanth Shenoy, VP of product marketing, VMware Cloud Foundation (VCF) division of Broadcom, during a media briefing. "So those two organizations coming together really helps our customers build Kubernetes-based modern applications."
Software development
Node JS
fromThe NodeSource Blog - Node.js Tutorials, Guides, and Updates
4 weeks agoLower Cloud Bills, Faster MTTR, Stronger Security: One Platform for Node.js
N|Sentinel uses AI-driven, context-rich diagnostics and actionable code generation to resolve Node.js performance and security issues in minutes, greatly reducing resolution time and costs.
fromDevOps.com
1 month agoSurvey Surfaces Widespread Adoption of AI to Build Software - DevOps.com
Conducted by Dynata on behalf of Infragistics, a survey finds 90% of IT leaders are using AI tools in application development, with 71% not hiring developers lacking AI experience.
Artificial intelligence
Ruby on Rails
fromAmazon Web Services
3 months agoSecure your Express application APIs in minutes with Amazon Verified Permissions | Amazon Web Services
Amazon Verified Permissions introduces a new open-source package that simplifies external fine-grained authorization for Express.js applications, enhancing security and reducing code complexity.
Information security
fromSecuritymagazine
3 months agoMore than 40% of Fintech Breaches Linked to Third-Party Vendors
Fintech companies show strong cybersecurity scores but face significant vulnerabilities from third-party risk.
Application security weaknesses are prevalent in the fintech sector, exposing firms to breaches.
#devsecops
Information security
fromHackernoon
2 years agoFrom Repos to Risks: How Hardcoded Secrets in GitHub Source Code Create Security Risks | HackerNoon
Hardcoded secrets in source code expose organizations to significant security risks, necessitating greater awareness and secure practices in development environments.
[ Load more ]