DevSecOps

One of the biggest failures in appsec is an attitude that blames users for security problems. A lot of processes and workflows break down because of an insecure design or insecure defaults. Benedek Gagyi chats with us about the impact of the user experience (UX) on security and why it's not only important to understand how to make a user's life eas...

The GoFetch side channel in Apple CPUs, OpenSSF's plan for secure software developer education, fuzzing vs. formal verification as a security strategy, hard problems in InfoSec (and AppSec), and more!

By dedicating themselves to building more secure products, software makers can increase the public’s trust and keep their users safer.

Here’s how we can balance security and development in the cloud.

Dev teams need to prepare so they can make an orderly transition to "teams.cloud.micrisoft."

The trivial tweaks to bypass authentication in TeamCity, ArtPrompt attacks use ASCII art against LLMs, annoying developers with low quality vuln reports, removing dependencies as part of secure by design, removing overhead with secure by design, and more!

Security pros say targeting source code will continue because it lets attackers identify new bugs and inject their own malware into the software supply chain.