Software Development

Latest

Software Development

Software developer typing programming code on computer showing memory-safe languages

NSA Urged Software Developers and Operators to Shift to Memory-Safe Languages

November 18, 2022

The NSA urged developers and organizations to switch to memory-safe languages to address memory safety issues responsible for most exploitable vulnerabilities. Microsoft and Google attribute 70% of some of their product vulnerabilities to software memory safety issues.

Developer coding software on computer showing Kubernetes security policy

Cyber Security Insights

Tips for Establishing a Kubernetes Security Policy

November 8, 2022

Kubernetes security directly impacts development work. The agility offered by container orchestration quickly reduces when security challenges impede build and deployment workflows. Any security weaknesses in production environments can – and almost certainly will – lead to data breaches.

Neon computer keyboard with color backlight showing shadow code and supply chain risk

Cyber Security News

Study Warns That Shadow Code on External JavaScript Libraries Pose a Serious Supply Chain Risk

May 30, 2022

Shadow code may pose a serious supply chain risk. Sampling 4,300 websites and applications ranked by traffic, researchers discovered that each website had an average of 12 third-party scripts and three fourth-party scripts.

Rear view shot of developer sitting in front of monitors showing Codecov supply chain attack

Cyber Security News

Codecov Supply Chain Attack Remained Undetected For Months and Potentially Affected Major Companies Including Google, IBM, HP, and Others

April 30, 2021

Codecov supply chain attack remained undetected for months and likely affected Google, IBM, HP, and others. Hackers stole user data from the company’s continuous integration environment.

Developer coding at night showing application security issues

Cyber Security News

Application Security Backsliding, Over 70% of Organizations Say Their Portfolio Is More Vulnerable

March 2, 2021

Ponemon and WhiteSource report on application security indicates that most large enterprise-scale organizations feel that their portfolio of applications has become more vulnerable recently.

Serious unshaven developer holding laptop showing No Code and Low Code security risks

Cyber Security Insights

Why Low Code Shouldn’t Mean High Risk for Businesses

January 6, 2021

No-code and low-code are undoubtedly being touted as the next big thing by the tech industry. Despite all the hype we shouldn’t lose focus on the biggest barrier to adoption: security.

Source code on display of software developer showing source code leak

Cyber Security News

Disney, Microsoft, and Other Major Companies Affected by Massive Source Code Leak

August 6, 2020

Source code leak of software belonging to over 50 high profile companies was made available online due to misconfiguration of their software development platforms.

Programming code abstract technology background showing need for balanced development automation

Cyber Security Insights

Using a ‘Three Lines of Defense’ Program to Balance Development Stakeholder Needs

August 5, 2020

Development automation needs to shift from an almost exclusively technical automation-for-speed perspective to a more business centric perspective of automation-for-balance.

Programmer working on computer showing the three barriers to the growth of DevSecOps

Cyber Security Insights

Three Barriers to Growth for DevSecOps

May 15, 2020

The use of DevSecOps methodology will enable any software organization to stay ahead of data security while rolling out their products efficiently and quickly.

Data Privacy News

An Obscure API Is Allowing Advertisers to View All Installed Android Apps on a Device

April 16, 2020

API that provides list of Android apps installed on a device may allow advertisers to fingerprint users' demographic information and track what they access on the internet.

Software Development

NSA Urged Software Developers and Operators to Shift to Memory-Safe Languages

Tips for Establishing a Kubernetes Security Policy

Study Warns That Shadow Code on External JavaScript Libraries Pose a Serious Supply Chain Risk

Codecov Supply Chain Attack Remained Undetected For Months and Potentially Affected Major Companies Including Google, IBM, HP, and Others

Application Security Backsliding, Over 70% of Organizations Say Their Portfolio Is More Vulnerable

Why Low Code Shouldn’t Mean High Risk for Businesses

Disney, Microsoft, and Other Major Companies Affected by Massive Source Code Leak

Using a ‘Three Lines of Defense’ Program to Balance Development Stakeholder Needs

Three Barriers to Growth for DevSecOps

An Obscure API Is Allowing Advertisers to View All Installed Android Apps on a Device

Respect for Consumers Is the Answer To Varying Data Privacy Laws

New Cybersecurity Laws Coming for UK MSPs

Despite a Year of Warnings and Patching, Nearly 3 Out of 4 Organizations Still Vulnerable to Log4Shell

Five Ways To Get the Chief Information Security Officer Role Right