Introducing Cimon: Your Superhero for CI/CD Pipeline Security
We are excited to announce the release of Cimon, a revolutionary tool designed to secure your CI/CD pipelines through a runtime security agent …
BLOG
Cycode Announces New SBOM Capabilities
Cycode is excited to announce the immediate availability of our new Software Bill of Materials (SBOM) feature. Cycode SBOM is a complementary technology to our Next-Gen Software Composition Analysis (SCA) solution…
The Risks of Hardcoding Secrets in Code Generated by Language Learning Models
It’s undeniable that machine learning, particularly Language Learning Models (LLMs), has paved the way for groundbreaking advancements in many fields…
Security Advisory: GitLab Malicious Runner Vulnerability
GitLab, has recently patched a critical vulnerability that allows attackers to attach malicious runners…
SLSA 1.0: Improving Software Supply Chain Security
The OpenSSF recently made a big announcement with the release of SLSA (Supply-chain Levels for Software Artifacts) version 1.0…
Enhancing CI/CD Pipeline Security with OIDC Tokens for Cloud Authentication
As the demand for faster and more efficient application deployment grows, the use of pipelines…
Cycode Launches New Application Security Posture Management (ASPM) Solution
Organizations are struggling to manage and secure their development infrastructure…
Open Source Licenses Made Simple
When considering open source risk, you immediately think of vulnerabilities that have led to high-profile breaches like Equifax’s. Though open source license violations grab fewer headlines, they still present a significant risk on their own…
Enhancing Cloud Security with Cycode’s S3 Scanning Feature
We’re excited to announce a new feature in Cycode that enhances the security of AWS S3 storage. Our S3 scanning feature scans the contents of files stored in AWS S3 buckets…
From Default to Secure: Analyzing the Vulnerability that Could Have Compromised Microsoft 365 Users
As part of our ongoing research in the open-source ecosystem, Cycode Labs has found and disclosed a novel attack…