#software-security

[ follow ]
Software development
fromDevOps.com
1 day ago

Coding at the Speed of AI: Innovation, Vulnerability, and the GenAI Paradox - DevOps.com

GenAI accelerates development but introduces and propagates security vulnerabilities, requiring updated expectations, policies, and developer training to keep AI as a co-pilot.
fromApp Developer Magazine
8 months ago

Google OOS Rebuild announced

Google's OSS Rebuild enhances trust and transparency in open source ecosystems through automation, independent verification, and secure provenance generation.
fromeLearning Industry
3 weeks ago

Secure Your eLearning Software: 10 Steps To Lock It Down Before Launch

Launching an eLearning platform without securing software can lead to cyberattacks, data leaks, and malware infections, jeopardizing user safety and brand reputation.
Online learning
Artificial intelligence
fromDevOps.com
3 weeks ago

ArmorCode Extends AI Tool to Generate Code Fixes for Specific Runtime Environments - DevOps.com

ArmorCode introduced new features for its Anya AI tool to enhance code remediation, supply chain visibility, and collaboration between development and cybersecurity teams.
fromDevOps.com
1 month ago

SBOMs Are Not Enough - DevOps.com

SBOM is essential for effective software composition analysis to manage vulnerabilities in third-party components.
#cybersecurity
fromDevOps.com
1 month ago
Digital life

The Hidden Imperative in the UK's Software Security Code: Provable Readiness - DevOps.com

fromDevOps.com
1 month ago
Digital life

The Hidden Imperative in the UK's Software Security Code: Provable Readiness - DevOps.com

fromIT Pro
1 month ago

Developers face a torrent of malware threats as malicious open source packages surge 188%

"Attackers are no longer simply experimenting with open source. The numbers are telling us that threat actors have identified data as the most profitable target, and developers as the easiest way in."
Privacy technologies
DevOps
fromVuejobs
2 months ago

Intermediate Fullstack Engineer (Ruby/vue.js), Software Supply Chain Security: Pipeline Security at GitLab

GitLab emphasizes collaborative software development to enhance organizational security and efficiency through AI-driven innovation.
Artificial intelligence
fromIT Pro
2 months ago

AI-generated code is in vogue: Developers are now packing codebases with automated code - but they're overlooking security and leaving enterprises open to huge risks

The rise of AI in development is leading to codebases that are predominantly AI-generated.
fromIT Pro
3 months ago

Shifting left might improve software security, but developers are becoming overwhelmed - communication barriers, tool sprawl, and 'vulnerability overload' is causing serious headaches for development teams

"Everyone talks about shifting left, but few are seeing the security gains they expected. Most organizations have tools in place, but they still struggle with noise, process friction, and developer resistance."
Software development
#devsecops
Artificial intelligence
fromHackernoon
3 years ago

Code Smell 300 - Package Hallucination | HackerNoon

Avoid hallucinated packages that compromise security and stability.
Implement robust validation to counter risks of AI-generated dependencies.
#ai
Artificial intelligence
fromIT Pro
4 months ago

Want to supercharge your vibe coding skills? Here are the best AI models developers can use to generate secure code

Vibe coding poses risks as AI-generated code often lacks adequate security measures, leading to vulnerabilities.
Artificial intelligence
fromDevOps.com
4 months ago

AI-Generated Code Packages Can Lead to 'Slopsquatting' Threat - DevOps.com

AI hallucinations can lead to incorrect or made-up package recommendations, posing security risks for software developers.
Software development
fromDevOps.com
4 months ago

Report: Commerical Software Just as Vulnerable as Open Source - DevOps.com

Commercial software is as vulnerable as open-source code, highlighting the need for improved security measures.
Numerous risks exist in widely used applications, raising concerns for developers and security teams.
[ Load more ]