Building Secure CI/CD Pipelines: Key Strategies from NIST SP 800-204D
In today’s fast-paced world of software development, speed and agility are paramount. Continuous integration and continuous delivery (CI/CD) pipelines…
Software Supply Chain Security
Cycode Risk Intelligence Graph (RIG) Now Built with AI Inside
Cycode is excited to announce the launch of new GenAI capabilities in our Risk Intelligence Graph (RIG).
Cycode Named in the 2024 Gartner® Emerging Tech Impact Radar: Cloud-Native Platforms Report
Cycode recognized as a Sample Vendor for Software Supply Chain Security in the 2024 Gartner® Emerging Tech Impact Radar: Cloud-Native Platforms report. Cycode, the leading application security posture management (ASPM) platform that enables secure application delivery, today announced the company was named a Sample Vendor for Software Supply Chain Security in the Gartner Emerging Tech … Read more
Cycode Discovers a Supply Chain Vulnerability in Bazel
The Cycode Research Team discovered a software supply chain vulnerability in one of Google’s open source flagship products, Bazel.
We found that a GitHub Actions workflow could have been injected by a malicious code due to a command injection vulnerability in one of Bazel’s dependent Actions.
CI/CD Pipeline Security: Best Practices Beyond Build and Deploy
Given the demand for rapid innovation and the adoption of agile methodologies, Continuous Integration/Continuous Deployment…
Software Supply Chain Security Deconstructed
In the last several years, software supply chain security has become a critical focus for organizations worldwide…
Three Lessons from the Ledger Connect Kit Supply Chain Attack
On December 14, 2023, the crypto community held its breath as news of a critical compromise involving the Ledger Connect Kit, a vital software component connecting hardware wallets to dApps, hit the industry.
Mastering Software Development Lifecycle Security: Best Practices
In the ever-evolving landscape of software development, it’s become absolutely paramount to ensure robust security measures throughout the Software Development Lifecycle (SDLC)…
Introducing the State of ASPM 2024 Report
Cycode is excited to announce the release of our State of ASPM 2024 report, the first ever report to analyze the state of application security and Application Security Posture Management (ASPM)…
Making Sense of SBOMs: The Minimum Requirements
The National Telecommunications and Information Administration (NTIA), under the guidance of the US Department of Commerce, recently released a white paper…