AppSec
This is How Orchestration Can Break the AppSec Stalemate
Since joining ZeroNorth, I’ve spent a lot of time meeting with companies to discuss the challenges and opportunities… The post This is How Orchestration Can Break the AppSec Stalemate appeared first on ...
Two Years After the Release of the 2017 OWASP Top Ten, Limited Improvements Shown
Contrast Labs finds that 71% of applications have at least one OWASP Top Ten vulnerability when onboarded to Contrast Assess ...
What Developers Need to Know About WhatsApp’s Recent Security Dilemma
Last week, reports, like this one from Dark Reading, surfaced a remotely exploitable bug found in Facebook’s popular WhatsApp chat app, that spies on users and specifically targeted human rights groups. Facebook ...
Why Does Security Matter For DevOps?
If you had $10,000, would you rather build a deck for your home or a fence? ...
Advancing Application Delivery
Are you in an organization implementing Continuous Delivery? Are you a manager who wants to see your applications respond at the pace of the market - or better, be in front of ...
A More Secure Web Needs Developers, Defenders, Advocates, and OSS
How’s that deodorant of yours working? If you wanted to hear yesterday’s presentation you had to crowd in, close -- it was standing room only. Sonatype’s Derek Weeks (@weekstweets) presented at Global ...
Why you need to be thinking about API Security
As cyber attackers continue to take advantage of vulnerable people, processes, and technology, they are now expanding their operations beyond “traditional” targets. It seems that nothing is outside of their jurisdiction and ...
New Micro Focus, Sonatype Partnership Provides 360 Degree View of AppSec
In today’s world, we know that most security breaches occur because of application vulnerabilities. We also know that most typical software applications are, on average, comprised of 85% open source software. These ...
Security Should Stop Being a Drag
About a year ago during my talk at the Nexus User Conference, and during a Virtual Session for RSA Conference APJ, I mentioned that a pipeline shouldn’t fail just because a security ...
Better, Faster, Stronger: Nexus Lifecycle’s Improved JIRA Add-on Gives Developers and AppSec Something to High-Five About
We’re happy to announce another helpful integration for Nexus Lifecycle -- our new and improved Nexus IQ Add-on for JIRA! Anyone involved in the product development process knows just how critical Atlassian’s ...
