Veracode published its latest State of Software Security research report that examined the top factors influencing flaw introduction and accumulation in the Financial Services sector – with automation and training as key drivers that reduce flaw introduction. It shows that nearly 72% of applicati...

Kodem CEO Aviv Mussinger explains why application security is getting more challenging as IT organizations embrace a wider range of software architectures.

Manuel Schuller, Wipro DevOps specialist, shares insights into his upcoming DevOps World London panel, "Compliance, security, and risk management in the SDLC." The panel will explore why "shift security everywhere" better fits DevOps philosophies, how to move from checklists to risk-based decisio...

CISA published a new White Paper on software identification ecosystems to help facilitate better vulnerability management and broader, more effective use of software bills of materials (SBOMs). It’s requesting public comment through Dec 11. Chris Hughes with Endor Labs says it represents an ambit...

Voya Financial CISO Stacy Hughes explains why compliance and cybersecurity management are finally starting to converge, thanks in part to new rules being imposed by the SEC.

Terry Ray, Imperva SVP, data security GTM and field CTO, shares the common data-related requirements prevalent in many privacy laws and key steps organizations should take to prepare for data privacy regulations in the coming year. Terry explores the California Privacy Rights Act (CPRA), increasi...

Timescale CTO Mike Freedman explains how to dynamically scale instances of PostgreSQL databases without having to rely on a serverless computing framework.

OpsCanvas CTO Jason Turim explains how diagrams can be used to more easily generate code that is also more reliable than what is produced by generative AI platforms such as ChatGPT.

Baruch Sadogursky, principal developer advocate for Gradle, dives into why the enterprise edition of the company's platform has been rechristened Develocity as part of an ongoing effort to improve application developer productivity.

Interpres Security CEO Nick Lantuh dives into the impact latest SEC rule changes are having on both cybersecurity teams and the cybercriminal syndicates looking to weaponize them.

Scott White, chief operating and revenue officer for DoiT, in the wake of an expanded $5 billion alliance with Amazon Web Services (AWS), explains how application environments are evolving in a new era of cloud computing.

ZeroRISC CEO Dom Rizzo, in the wake of picking up $5 million in funding, explains how an open source OpenTrust cybersecurity initiative for silicon will ultimately make IT environments more secure in a way that also reduces costs.

According to Attila Török, CISO at GoTo, today, a strong cybersecurity program is a revenue booster — not a cost center.

Dr. Kanwar Preet (KP) Sandhu, head of global strategic initiatives for the cybersecurity practice at Tata Consultancy Services (TCS), dives into the security trends that are having the biggest impact on enterprise IT organizations.

California is on its way to enacting the Delete Act. Recently passed by its legislature, the bill only needs the state governor’s signature to become law. Jason Patel, associate vice president of engineering & tech innovation at CHEQ, believes the Delete Act is a canary in the coal mine of future...

Ross Bryant, chief of security research for Phylum, dives into a report that finds there are now tens of thousands of cyberattacks being made against software supply chains.

Illumio partnered with technology research specialist Vanson Bourne for their 2023 Cloud Security Index, which presents the findings of global research into the current state of cloud security, the impact of cloud breaches, and why traditional cloud security technologies fail to keep organization...

Payal talks about how AI will improve the overall effectiveness of IT observability solutions over the short and long-term. She also shares how IT teams can make the right investments in AIOps and the best practices associated with managing AIOps for maximum effectiveness.

Mobb CEO Eitan Worcel explains why the application security benefits of DevSecOps remain elusive, as the tools being used to generate alerts lack the crucial context developers need to prioritize their efforts.

Daytona CEO Ivan Burazin details his plan to introduce a platform for managing on-premises developer environments, in wake of picking up $2 million in seed funding.

Stytch CEO Reed McGinley-Stempel explains why securing artificial intelligence (AI) models needs to start with more rigorous approaches to identity management.

During this interview, Hank Schless will discuss a new phishing kit targeting customers/users of financial institutions and crypto exchanges. "Robin Banks" operates as a phishing as a service (PhaaS) and leverages MFA bypass as one of its core tactics. Robin Banks provides yet another example of ...

The acceleration of digital transformation and rise in API, containerization, and multi-cloud deployments is creating an even greater dynamic attack surface. Jeremy Ventura, ThreatX field CISO, discusses comprehensive API and application security with protection from the edge to runtime environme...

GitLab announced updates to GitLab Duo, the company’s suite of AI capabilities, including the beta of GitLab Duo Chat available in the GitLab 16.6 November product release, and the general availability of GitLab Duo Code Suggestions in the GitLab 16.7 December product release.