Tag: secure coding
Surprise! Everybody Uses AI Tools for Software Development, Few Do So Securely
Teri Robinson | | AI security, AI-generated code, appsec, code security automation, Dependency Management, devsecops, SBoM, secure coding, software supply chain riskAI is generating code faster than teams can secure it, widening software supply chain risk and exposing major gaps in AppSec and governance ...
5 Pillars of Successful Web App Development
Roman Davydov | | app development best practices, app performance, cloud hosting, cross-platform compatibility, custom web apps, devops, digital transformation, Enterprise software, Itransition, microservices, responsive design, scalability, secure coding, software development, user-centric design, UX design, web app development, web architecture, web securityToday, building a high-quality and competitive web application requires more than just clean code, a user-friendly UX and good development practices. The success of such a project also hinges on creating a strategic approach and prioritizing components ...
Sonar Previews Service to Improve Quality of AI Generated Code
Mike Vizard | | AI code quality, AI code review, AI code security, AI model training, AI-generated code, bug reduction, code vulnerabilities, cybersecurity in AI, devsecops, Large Language Models, reinforcement learning, secure coding, software development, Sonar platform, SonarSweepSonar’s SonarSweep improves AI-generated code by reducing bugs and vulnerabilities, helping organizations train more reliable AI models ...
Secure By Design, Secure by Default
Julian Browne | | adaptive security, continuous improvement, continuous security, cyber resilience, devops, devops best practices, devsecops, dynamic systems, embedded security, enterprise compliance, incident response, modern software delivery, production monitoring, real-time security, secure by default, secure coding, secure-by-design, security governance, security in production, security strategy, security theatre, shift left security, software security, static analysis, threat modeling“Shift left” alone won’t secure software. Real security must be embedded continuously across design, development, and production—not just moved earlier ...
Coding at the Speed of AI: Innovation, Vulnerability, and the GenAI Paradox
John Trest | | AI code review, AI Governance, AI hallucinations, AI in DevOps, AI in software development, AI security best practices, AI-generated code vulnerabilities, ChatGPT, cross-site scripting, developer training, devsecops, EU AI Act, GenAI security risks, generative AI, GitHub Copilot, hardcoded credentials, insecure deserialization, Log4Shell AI reproduction, Replit Ghostwriter, secure coding, U.S. Executive Order 14110Generative AI accelerates software delivery but also reintroduces vulnerabilities, making secure coding practices, oversight, and developer training essential for safe adoption ...
Graylog Makes Free API Security Tool Available to Developers
A free version of Graylog's API security platform is intended to encourage developers to adopt best practices to secure APIs ...
Snyk Survey: AI Generating More Vulnerabilities in Code
Mike Vizard | | appsec, artificial intelligence, generative AI, secure coding, Snyk, software securityA Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox ...
DevOps Security: Your Complete Checklist
Yoni Farin | | application development, checklist, devops, devsecops, secure coding, security, Software Supply ChainIn a fast-paced environment like DevOps, your security strategy needs to be even more agile. While moving fast is great for delivering application features and functionality, speed shouldn't come at the cost ...
GitGuardian Survey Surfaces Secrets Management Challenges
A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting that ...
Codenotary Previews Secure SBOM Creation Service
Codenotary today made available a preview of a centralized repository service for generating and storing software bills of materials (SBOMs) that makes it simpler to securely share them as necessary. Moshe Bar, ...
Cycode Adds ASOC Module to Streamline DevSecOps Workflows
Cycode has added a module to its platform for mapping metadata and events using graph technology that makes it simpler for application development and cybersecurity to consolidate alerts generated by their DevSevOps ...
5 Unusual Ways to Improve Code Quality
Code quality refers to how well-written and maintainable software code is. It encompasses factors such as readability, efficiency, scalability, reliability, maintainability and security. High code quality ensures that software is easy to ...
