Topic: security

Quest Software Announces Public Beta for SharePlex for PostgreSQL

ALISO VIEJO, Calif. – Sept. 22, 2022 – Quest Software, a global systems management, data protection and security software provider, today announced the public beta of SharePlex for PostgreSQL. SharePlex is the industry-leading database management and replication solution designed to help customers ensure high availability and facilitate the movement of data between platforms. Businesses are … continue reading

Coding Labs help developers take learning into code

To help developers move from learning to applying that knowledge to make their code more secure, Secure Code Warrior today launched Coding Labs, to enable real-time coding in an in-browser IDE. “We found that 40% of developers don’t believe they’re receiving enough hands-on training from their current tools and resources. We’ve set out to fundamentally … continue reading

White House guidance requires agencies to inventory all software in 90 days

The White House issued a memorandum that requires each federal agency to comply with the NIST Guidance when using third-party software on the agency’s information systems and to inventory all software subject to its requirements within 90 days.  As part of the new guidance that follows the executive order “Improving the Nation’s Cybersecurity” issued in … continue reading

Google introduces new features to identity services library to make authentication easier for developers

Google is trying to make authentication easier and safer for developers by introducing new features to the Google Identity Services (GIS) library.   “For developers, our focus has always been to offer a frictionless experience that makes it easier for users to onboard and return to partner platforms, while also helping developers create a trusted relationship … continue reading

Threat landscapes: An upstream and downstream moving target

In recent years, hackers have become very sophisticated in the ways they attack upstream development pipelines by introducing vulnerabilities into the software supply chain. The popularity of open source makes those repositories a low-hanging fruit to target. In an SD Times Live! Event titled “Threat Landscapes: An Upstream and Downstream Moving Target,” Theresa Mammarella, developer … continue reading

ThreatModeler 6.0 now available with features to simplify threat modeling for developers

The threat modeling and security cloud infrastructure company, ThreatModeler, has announced the general availability of ThreatModeler 6.0. This release offers users multiple new capabilities intended to improve the threat modeling process for both security and DevOps teams. With this update comes a complete redesign of the platform’s interface, workflows, model building, and reporting based on … continue reading

Rust establishes new security team

The Rust Foundation, the nonprofit organization for the Rust programming language, today announced that it will be establishing a dedicated security team, underwritten by the OpenSSF’s Alpha-Omega Initiative as well as the foundation’s newest platinum member, JFrog.  “There’s often a misperception that because Rust ensures memory safety that it’s one hundred percent secure, but Rust … continue reading

Sephora becomes the first company fined for violating CCPA

California Attorney General Rob Bonta has announced a settlement with the beauty brand Sephora over allegations that the company has violated California’s landmark privacy law, the California Consumer Privacy Act (CCPA). According to Bonta, it was determined after an enforcement sweep that Sephora failed to disclose to customers that the company was selling their personal … continue reading

A guide to API management tools

The following is a listing of API management tool providers, along with a brief description of their offerings.  Apigee is an API management platform for modernizing IT infrastructure, building microservices and managing applications. The platform was acquired by Google in 2016 and added to the Google Cloud. It includes gateway, security, analytics, developer portal, and … continue reading

Security and integration are key concerns for API management

The use of APIs has skyrocketed over the years and with organizations using so many different types of APIs on a normal basis, API management has become essential for managing the API attack surface.  Fifty-one percent of respondents said that more than half of their organizations’ development effort is spent on APIs—compared with 40% of … continue reading

Traceable AI introduces API Security Testing

The API security and observability company, Traceable AI, today announced that its API Security Testing solution in its API Security Platform is now generally available. This allows users to test any API in pre-production for vulnerabilities, accuracy, reliability, and security. According to the company, this release ensures that all APIs are aligned with the highest … continue reading

Styra introduces automated configuration file scanner

Styra, the company behind Open Policy Agent (OPA), has announced a new solution for scanning configuration files for errors. The new feature, Repo Scan, is included as part of Styra Declarative Authorization Service (DAS).  According to Styra, cloud components and platforms like AWS, GCP, and Microsoft Azure are governed and controlled by automated tooling, and … continue reading

DMCA.com Protection Status