vulnerability management

cybersecurity

Developer Tech News

1 week ago

Information security

CISA sounds alarm on critical GitLab flaw under active exploit

Organizations should promptly apply security updates in response to active exploitation attempts. [ more ]

New Relic

4 weeks ago

Information security

Identify vulnerabilities across application environments

Securing application environments is essential for operational security, compliance, and customer trust, requiring identification and mitigation of vulnerabilities through detailed understanding and effective strategies. [ more ]

New Relic

2 months ago

DevOps

Observability for continuous vulnerability assessment and remediation

Observability is crucial for cybersecurity strategies, offering a proactive approach to identifying and addressing vulnerabilities.

Observability provides a comprehensive view of an organization's digital environment, enabling continuous assessment and timely remediation of security challenges. [ more ]

Silicon Republic

3 months ago

Privacy professionals

Cloud and AI will be 2024's cybersecurity battlegrounds

Zero-day flaws will be exploited at mass scale

AI technology will lead to rise in advanced social engineering attacks [ more ]

morecybersecurity

Theregister

3 days ago

Information security

68 tech companies sign CISA's secure by design pledge

Tech giants sign CISA's Secure by Design pledge to enhance product security by committing to specific actions within a year. [ more ]

Amazic

2 months ago

Information security

5 security challenges in containerized runtime environments and how to overcome them - Amazic

Containerized environments pose unique security challenges like isolation and multi-tenancy, as well as vulnerability management. [ more ]

New Relic

2 months ago

Information security

Expert guide to managing code-level vulnerabilities

Code-level vulnerabilities are hidden flaws within a software's source code that can lead to security breaches and data loss.

Identifying and understanding the nature of these vulnerabilities is the first step in managing them. [ more ]

DevOps.com

3 months ago

Information security

Cycode Discloses GitHub Actions Vulnerability in Google Bazel Project - DevOps.com

Researchers discovered a command injection vulnerability in GitHub Actions used to update the Bazel project.

The vulnerability could have allowed the insertion of malicious code into the codebase managed by Google. [ more ]

CyberScoop

5 months ago

Information security

Cyber threats change daily. Have your endpoint and vulnerability management capabilities kept pace?

Endpoint and vulnerability management capabilities need to keep pace with daily changing cyber threats.

Lessons from the SolarWinds hack highlight the importance of EDR and vulnerability identification and remediation.

Generating a Software Bill of Materials is critical for security operations. [ more ]

SecurityWeek

5 months ago

Information security

Application Security Startup Aikido Security Raises 5 Million

Aikido Security has raised â¬5 million in seed funding.

The Belgium-based startup aims to provide SaaS businesses with an all-in-one platform for application security.

The new investment will help Aikido enhance its platform and expand its international presence. [ more ]

DevOps.com

1 month ago

Software development

From Chaos to Clarity: Streamlining DevSecOps in the Digital Era - DevOps.com

The mix of security tools in DevSecOps can create discord due to redundant alerts and lack of context.

Prioritizing vulnerability backlog based on impact is crucial for improving security posture. [ more ]

Python Software Foundation Blog

3 months ago

Software development

Software Bill-of-Materials documents are now available for CPython

The Python Software Foundation has released Software Bill-of-Materials (SBOM) documents for CPython source releases to improve vulnerability management.

SBOMs provide a comprehensive scan for software vulnerabilities and reduce the chances of vulnerabilities being missed by scanners. [ more ]

DevOps.com

5 months ago

Software development