A majority of codebases contain outdated components, or “zombie code,” which can result in unpatched vulnerabilities lingering long after they should have been fixed. According to Synopsys’ Open Source Security and Risk Analysis report, which was released today, 91% of codebases contain components that are at least 10 versions out-of-date. Furthermore, 49% of codebases contain … continue reading
The White House Office of the National Cyber Director (ONCD) is calling on technology leaders to work together to reduce the software attack surface by adopting memory safe programming languages. Memory safety bugs are one of the most prevalent security issues over the last few decades, according to a report published by the office. These … continue reading
The Open Source Security Foundation (OpenSSF) released the annual report for its Alpha-Omega project, an initiative that focuses on identifying and remedying vulnerabilities within source code to create a safer digital environment. According to OpenSSF, the Alpha-Omega project has become a pivotal player in enhancing the security infrastructure of open-source software, reflecting a proactive approach … continue reading
Apple has announced significant updates to iOS, Safari, and the App Store, specifically for the European Union, in response to the Digital Markets Act (DMA). These updates encompass over 600 new APIs, enhanced app analytics, support for alternative browser engines, and more options for app payment processing and iOS app distribution. These changes aim to … continue reading
It’s no surprise that people have grown more interested in AI over the last year. The technology insights company O’Reilly has just published its annual trends report, in which it revealed just how much more interest people have these days. According to the findings, interest in GPT and generative AI has grown 3,600% year over … continue reading
Quest Software, a provider of systems management, data protection, and security software, has announced the general availability of Toad Data Studio. This all-in-one platform is designed to streamline database management across multi-database platform environments. The release comes at a time when the complexity of database infrastructure is increasing and enterprises are struggling with agility and … continue reading
In a recent surge within the digital sphere, APIs have eclipsed other forms of internet traffic, becoming a pivotal component of our online world. The 2023 API Security and Management Report indicates that APIs now account for more than half (57%) of the dynamic internet traffic processed by Cloudflare in the past year. Yet, this … continue reading
The following is a listing of security testing tool providers, along with a brief description of their offerings. FEATURED PROVIDER HCL AppScan helps organizations pinpoint and remediate vulnerabilities throughout the software development lifecycle (SDLC) with a suite of application security testing platforms available as a cloud-based service (SaaS), self-managed, or cloud-native. Powerful static, dynamic, interactive, … continue reading
Patch management is like painting or gardening: At first glance, it may seem like routine and straightforward work. But in practice, it can prove much more challenging than it looks. Just as lack of prep work can spell disaster for a paint job, or forgetting to water and weed regularly can turn your garden into … continue reading
As we bid farewell to another year, it is crucial to reflect on the threats of cyberattacks and ransomware and think of how to mitigate them moving forward. However, this year feels a bit different – marked by the unknown of what challenges AI will bring to the security landscape in the new year. This … continue reading
AWS is making it easier for companies to deploy applications from the AWS Marketplace in their environment with the release of SaaS Quick Launch. According to AWS, this new capability will solve a previous challenge of deploying applications, which could require hours to set up permissions policies and cloud infrastructure. Manually configuring these also introduced … continue reading
The Cybersecurity and Infrastructure Security Agency (CISA) has just published a roadmap for safely and responsibly utilizing AI. This follows President Biden’s Executive Order on AI last month. “In last month’s Executive Order, the President called on DHS to promote the adoption of AI safety standards globally and help ensure the safe, secure, and responsible … continue reading
