CSO wish list for Developers
The four things the CSO of today's modern organization wishes their Developers did more of and how to do them.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
WEBINAR MOMENT: Do Not Push This To Production
A fun moment from GitGuardian's Ethical Hacking Webinar with Snyk's Sonya Moisset. Sonya finds code that shouldn't have been pushed to production.
WEBINAR MOMENT: Trying a Directory Traversal Hack
A clip from GitGuardian's webinar on Ethical Hacking. Special guest, Snyk's Sonya Moisset, uses a directory traversal hack to get much deeper into the app's source code than should ever be allowed.
GitGuardian Infra as Code Security Analytics
Are you working toward better security for your infrastructure as Code deployments? GitGuardian can now help you track your progress! With the new Analytics view built into GitGuardian's Infra as Code Security, you can quickly understand the health of your IaC practice from one dashboard.
Connect Using EC2 Instance Connect via Teleport
Amazon EC2 is the most popular cloud computing environment and powers a great part of the Internet. Accessing EC2 Instances is done using SSH, which typically involves generating and managing SSH Keys. This is not easy when you have a large fleet/team.
Turnover, Relationships, and Tools in Cybersecurity
Some things, like choosing tools, are perennial problems. Others, like complete security team turnover, seem to be a more recent development within my circles. But either way, staff turnover has ripple effects that are not always immediately apparent. Let’s take a look.
Manifest V3 Essentials: Chrome Extension Tips!
Snyk helps software-driven businesses develop fast and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and more.
How Dynamic Analysis Helps You Enhance Automation for DevSecOps
DevSecOps, also known as secure DevOps, represents a mindset in software development that holds everyone accountable for application security. By fostering collaboration between developers and IT operations and directing collective efforts towards better security decision-making, development teams can deliver safer software with greater speed and efficiency. Despite its merits, implementing DevSecOps can introduce friction into the development process.
Kubernetes 1.29: The Security Perspective
Kubernetes 1.29 will be the last release from the Kubernetes team for 2023. The new release has 49 enhancements, with a multitude of beta and stable ones in addition to a high number of bug fixes. As Kubernetes security professionals, we explored the release to find the most notable security-centric features and improvements. This blog is tailored for those with a keen eye for security, aiming to break down how these changes will impact and enhance the security posture of Kubernetes clusters.