Tag

code security

18 articles

Latest in code security

Blogs

Your AI Coding Assistant Has the Keys to the Repo. Z.ai Just Showed Why That Matters

ZCode’s default-on indexing feature reportedly uploaded entire developer workspaces to cloud storage, highlighting why AI coding assistants should be treated as privileged software and closely monitored.

Sep 23, 20263 min

All code security Articles

Showing 1–18 of 18

Jun16

Blogs

GitHub Enterprise Server 3.21 Is Now Generally Available

GitHub has released GitHub Enterprise Server (GHES) 3.21, the latest version of its self-hosted platform for enterprise development teams. The release focuses on improving deployme…

3 min

Jun12

Blogs

Shift Left to the Developer’s Machine: Building Local Git Security Gates

Shift left to the developer’s machine. The principle is what matters: Stop secrets before they ship. The tooling is a means to that end.

3 min

Feb23

Blogs

Claude Code Security Finds the Bugs That Static Analysis Can’t — and Wall Street Noticed

Claude Code Security scans code like a human researcher, not a rule engine. Anthropic found 500+ decade-old bugs — and cybersecurity stocks felt it.

3 min

Nov25

Endor Labs Adds AI SAST Tool to Discover Vulnerabilities in Code

Endor Labs launches an agentic AI-powered SAST tool that drastically reduces false positives, identifies deeper code flaws and helps DevSecOps teams secure AI-generated code across…

3 min

Oct13

Blogs

Git Services Need Better Security. Here’s How End-to-End Encryption Could Help

A new study from the University of Sydney, UESTC, and Google introduces efficient end-to-end encryption for Git services like GitHub and GitLab. Learn how this breakthrough could s…

3 min

Aug07

What Vibe Coding Means for the Enterprise: Fast Code, Real Considerations

When vibe coding is adopted without guardrails, it introduces substantial risks that can undermine the very productivity gains it promises.

3 min

Jul11

Blogs

The Hidden Imperative in the UK’s Software Security Code: Provable Readiness

The challenge ahead is clear: Let’s not settle for minimum viable security. Let’s aim for resilient, trustworthy and demonstrably secure software that stands up to the threats of t…

3 min

Mar06

AISecOps: Expanding DevSecOps to Secure AI and ML

AISecOps, the application of DevSecOps principles to AI/ML and generative AI, means integrating security into models’ life cycles.

3 min

Jan24

Venafi Adds Ability to Prevent Unauthorized Code From Running

Venafi added an ability to prevent unauthorized code from running in IT environments that make use of its machine identity management platform.

3 min

Oct20

Blogs

Survey Sees Spike in Untested Code Leading to a DevOps Crisis

A Sauce Labs survey found many developers admitted they pushed code into a production environment without testing.

3 min

Jun26

OutSystems Embraces Generative AI to Speed App Dev

OutSystems, via a Project Morpheus initiative, intends to leverage generative artificial intelligence (AI) technologies to make it possible to automatically generate an application…

3 min

Apr07

Blogs

A DevOps Guide to the Language of DevSecOps

Security is increasingly important for DevOps due to the growing complexity of applications and the accelerated pace of development. As organizations adopt DevOps practices, they f…

3 min

Mar24

Blogs

A Seven Point Checklist for Getting SAST Right

With so many physical products—from automobiles to airplanes and medical devices to industrial control systems—now being driven by software, product security has become a top-level…

3 min

Apr07

DevOps and Open Technologies

Google Allies With GitHub to Secure Software Supply Chains

Google today revealed it has been working with GitHub to create a forgery-proof method for signing source code as part of an ongoing effort to better secure software supply chains.…

3 min

Nov23

Blogs

Securely Streamline Code Signing for DevOps and DevSecOps

Introducing code-signing provides security within the application, but teams should take care to understand and implement the process effectively Digital certificate management, wi…

3 min

Apr28

Blogs

Accurics Makes Infrastructure as Code More Secure

Fresh off raising $5 million in funding, Accurics today launched a platform that analyzes the code employed to manage infrastructure as code for vulnerabilities as well as indicato…

3 min

May24

Blogs

Securing Third-Party and Open Source Code Components: A Primer

The increasing popularity of open source code continues to be a boon for developers across the industry, allowing them to increase efficiency and streamline delivery. But there are…

3 min