Cloud security provider Accurics announced that it is extending support in its Terrascan open-source tool for detecting compliance and security violations across Infrastructure as Code to two Cloud Native Computing Foundation projects: Helm and Kustomize.
Version 1.0 of the new debugger for Python in Visual Studio Code (VS Code), called Debugpy, shows up in the latest update of the popular Python tooling for the open source, cross-platform code editor.
New security solution surfaces vulnerabilities in third-party code used in the development of custom applications.
Automated IT and security solutions provider Ivanti today announces two additions to its Neurons "hyper-automation" platform: Neurons for Patch Intelligence and Neurons for Spend Intelligence.
The results of a new survey suggest that a growing number of security and development professionals are convinced of the value of Security Champions programs.
Authentication solution provider Okta has extended its Okta Devices Platform Service capabilities to developers via the Okta Devices SDK, which provides packaged tooling to build passwordless sign-in flows through branded push notifications with biometric capabilities, minimizing friction for end-users and increasing security posture.
ZeroNorth announces a new set of capabilities for its SaaS-based security platform aimed at removing friction between security and DevOps teams by making security "integral and transparent" within the SDLC.
Cloud security provider Accurics announced a new GitHub app designed to further automate the programmatic enforcement of security policies throughout the software development workflow.
Sumo Logic's fourth annual Illuminate user conference, virtual this year because of the pandemic, wrapped up yesterday after two days of educational sessions, expert keynotes, and product and initiative announcements.
CloudBees recently announced a new set of DevSecOps capabilities for its continuous integration and delivery (CI/CD) solutions, including feature flag integration within the CI and CD environments, which the company is billing as an industry first.
Sonatype's malicious code detection bots discovered and confirmed the presence of new vulnerable npm packages that exfiltrate/broadcast the target's IP, username, and device fingerprint info onto a public GitHub page where anyone can gain access.
Microsoft enables continuous developer-driven "fuzzing" with newly open sourced tool.
Cloud security provider Accurics has release an update of its free and open-source Terrascan static code analyzer with new support for Kubernetes.
A group of leading tech industry heavy weights that includes Microsoft, IBM, and Google, announced the formation of a new software foundation to consolidates industry efforts to improve the security of open-source software.
Automated IT and security solutions provider Ivanti is partnering with Intel to provide Device-as-a-Service (DaaS) with Intel's Endpoint Management Assistant
New Java developer library streamlines use of Platform Agnostic Security Tokens (PASETOs) and provides an alternative to JSON Web Tokens (JWT) to authenticate end users.
Red Hat announces the beta availability of the latest minor release of the RHEL 8 platform.
Google Cloud's Confidential Virtual Machines enable users to encrypt their data for the first time in-use--in other words, while it's being processed, in-memory, not just when it's at rest in storage or in-transit.
DevSecOps solutions provider Alcide has released a beta version of a new solution designed to provide "end-to-end continuous security guardrails" for Kubernetes deployments.
The latest Critical Patch Update (CPU) from Oracle, published today, addresses 397 security vulnerabilities across the company's product suite, including 15 patches for Java SE.