Hardening Your SDLC in Response to Lapsus$ Breaches
Over the last several weeks, Lapsus$ has taken down a who’s who of software development teams: NVIDIA, Samsung, Vodafone, Ubisoft, and Mercado Libre.
Asset Inventory
Implementing SLSA Source Requirements to Improve Software Supply Chain Security
SLSA source requirements help mitigate threats originating from source control management.
Cycode Integration with JFrog Pipelines and Artifactory
JFrog and Cycode created an integration that will improve the security of our customers’ digital assets and dependencies.
“Shadow Dev” and AppSec’s Visibility Gap
According to Gartner’s Information Technology glossary, Shadow IT refers “to IT devices, software and services outside the ownership or control of IT organizations.”…
Two Ways to Address the Log4J Vulnerability
Researchers have released patches for the log4j vulnerability, allowing some organizations to breathe a sigh of relief.
NIST Cybersecurity Framework (NIST CSF)
The National Institute of Standards and Technology (NIST) first released its Cybersecurity Framework in 2014 in response to an Obama-era Executive Order mandating…