a Futurum companyTag
67 articles
Blogs
HackerOne research shows vulnerability remediation is getting faster, but AI-driven discovery is expanding exposure debt even more quickly, putting DevSecOps teams under growing pressure.
Showing 1–24 of 67
Blogs
Cloudsmith this week revealed it has expanded the policy management and continuous risk detection capabilities it makes available within its software artifact management platform t…
Blogs
Checkmarx this week revealed it has re-engineered the core engines embedded within its static application security testing (SAST) tools for the agentic artificial intelligence (AI)…
Sponsored Content
“AI-powered” has become the default label for every security tool on the market. But there’s a meaningful difference between a tool that uses AI to generate alerts after the fact a…
Video Interviews
Jonathan Rende, chief product officer at Checkmarx, tackle’s one of the most urgent questions in AppSec right now: what happens when AI starts writing the majority of your software…
AI
AI is generating code faster than teams can secure it, widening software supply chain risk and exposing major gaps in AppSec and governance.
Blogs
A survey of leaders based in North America finds 62% work for organizations that knowingly release insecure code to meet delivery deadlines.
Blogs
The challenge ahead is clear: Let’s not settle for minimum viable security. Let’s aim for resilient, trustworthy and demonstrably secure software that stands up to the threats of t…
Blogs
An analysis of more than 101 million application security alerts conducted by OX Security, a provider of an application security posture management (ASPM) platform, finds only 2% t…
Blogs
While various AI/ML application risks are like traditional application security risks and can be protected using the same tools and platforms, runtime security for the new models r…
AI
Opus Security today unveiled a platform that employs artificial intelligence (AI) agents to its vulnerability management platform that are trained to discover known issues and sugg…
Blogs
F5 launches industry’s first converged Application Delivery and Security Platform, empowering DevOps teams to manage hybrid multicloud and AI-driven workloads more efficiently.
Application Performance Management/Monitoring
Today’s fast-paced software development landscape can often create friction between development teams and their application security (AppSec) counterparts. While everyone wants to…
AI
DryRun Security today added an ability to use natural language to define and enforce application security policies as application developers build software.
Blogs
The Linux Foundation in collaboration with multiple providers of software composition analysis (SCA) published a study this week, that in addition to identifying the most widely us…
Blogs
Development teams are under growing pressure to build cutting-edge applications with shorter development lifecycles. However, they are often slowed down by the growing burden of fi…
Application Performance Management/Monitoring
The role cybersecurity teams play in ensuring applications are secure is about to become a lot more proactive in the age of artificial intelligence (AI).
Blogs
Sonatype today during a virtual All-Day DevOps (ADD) event shared the results of a report that finds there has been a 156% increase in the number of malicious open source packages…
Application Performance Management/Monitoring
https://devopsy.kinsta.cloud/appsec-in-the-cloud-what-devops-teams-should-know/
Application Performance Management/Monitoring
A global survey of 900 application security professionals finds nearly two-thirds work for organizations that have had their software supply chains compromised in the past two year…
AI
Mend.io this week added a MendAI tool to its application security portfolio that identifies code generated by an artificial intelligence (AI) model.
Blogs
DevSecOps requires teams to collaborate and enable the organization to deliver safer applications to customers without compromising security.
AI
Cycode’s generative AI capabilities in its ASPM platform make it simpler for DevSecOps teams to identify the root cause of vulnerabilities.
API
Many API attacks are effectively zero-day, novel attacks that exploit recent and unique changes to specific APIs. Here’s how to stop them.
