programming

Code dependency mapping’s role in securing enterprise software

October 16, 2019

Enterprise software is only as good as its security. Today, a data breach costs $3.92 million on average. Organizations are expected to spend $124 billion on security in 2019 …

Backdoored Ruby gems stole credentials, injected cryptomining code

August 21, 2019

The compromise of several older versions of a popular Ruby software package (aka a Ruby “gem”) has led to the discovery of a more widespread effort to inject …

Securing modern web apps: A case for framework-aware SAST

July 22, 2019

If you were to write a web application entirely by yourself, it would be a rather daunting task. You would need to write the UI elements from lower-level APIs, set up and …

Framing supply chain attacks

April 9, 2019

The increase in the demand for innovative software has effectively reshaped the software development industry itself. Today, speed and agility are paramount and development …

Building security into cloud native apps with NGINX

February 19, 2019

Companies like Airbnb, Uber and DoorDash, which have a cloud-based software infrastructure as one of their main enablers, are disrupting the hospitality, transportation and …

Popular coding advice doesn’t necessarily equal secure coding advice

January 9, 2019

Stack Overflow is a hugely popular online forum/Q&A site that many programmers and software developers use to find answers to particular programming problems. …

How students learn to code, evaluate job opportunities

December 14, 2018

New data from HackerRank reveals the technical skills, learning preferences and career motivators of collegiate software engineers. The findings provide a playbook for …

Countering threats: Steps to take when developing APIs

November 6, 2018

High profile data breaches resulting from faulty APIs continue to make headlines. In the last few months alone, T-Mobile’s data breach resulted in hackers stealing personal …

Python-based attack tools are the most common vector for launching exploit attempts

October 1, 2018

Hackers have an obvious predilection for Python-based attack tools, says Imperva. “When examining the use of Python in attacks against sites we protect, the result was …

Secure your open source components automatically, continuously, and silently

August 22, 2018

In this podcast recorded at Black Hat USA 2018, Azi Cohen, General Manager at WhiteSource, talks about open source lifecycle management. WhiteSource manages open source …

GitHub adds Python support for security alerts

July 17, 2018

GitHub has announced that its recently introduced feature for alerting developers about known vulnerabilities in software packages that their projects depend on will now also …

George Gerchow, CSO at Sumo Logic: Our DevSecOps strategy

July 16, 2018

Sumo Logic was founded in 2010 by experts in log management, scalable systems, big data, and security. Today, their purpose-built, cloud-native service analyzes more than 100 …