Remove application-security what-solarwinds-means-for-devsecops
article thumbnail

How to Prevent Supply Chain Attacks by Securing DevOps

Security Boulevard

Best practices for securing the software supply chain. The Department of Defense’s Cybersecurity Maturity Model Certification, established on January 31st, 2020, was the first attempt at creating a supply chain security compliance mandate. Software developers can prevent supply chain attacks by securing DevOps. Financial impact.

Software 145
article thumbnail

What Are Security Guardrails? Why Do They Matter to Your AppSec Program?

SecureWorld News

The wide adoption of cloud-native applications and infrastructure has propelled DevOps and a self-service culture enabling developers to go from code to cloud in hours. Security teams are entirely unprepared to govern and secure the modern SDLC in this agile world. What are security guardrails?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Guarding Against Solorigate TTPs

eSecurity Planet

A March 2020 software update of the SolarWinds Orion management platform gave malicious actors unhindered access to key government and enterprise networks. Microsoft has dubbed the infamous supply chain compromise of SolarWinds as “Solorigate.” Also Read: FireEye, SolarWinds Breaches: Implications and Protections.

article thumbnail

New SEI CERT chief and first ever federal CISO: old cybersecurity models have ‘been overcome’

SC Magazine

Gregory Touhill, former federal chief information security officer and deputy assistant Homeland Security secretary for cyber security operations, seen here at a House Foreign Affairs Committee hearing in 2015 in Washington, DC. chief information security officer. Photo by Mark Wilson/Getty Images). I lived it.

CISO 109
article thumbnail

Best DevSecOps Tools

eSecurity Planet

The growth of DevSecOps tools is an encouraging sign that software and application service providers are increasingly integrating security into the software development lifecycle (SDLC). This article looks at the best commercial and open source DevSecOps tools and what to consider when evaluating DevSecOps solutions.

article thumbnail

SolarWinds-Like Supply Chain Attacks will Peak in 2022, Apiiro Security Chief Predicts

eSecurity Planet

Cyberthreats against software supply chains moved to the forefront of cybersecurity concerns a year ago when revelations of the attack on software maker SolarWinds emerged. Moshe Zioni, Apiiro VP of Security Research. It’s been a detection game for us for the better part of 10 years-plus for the application security realm.”.

article thumbnail

Importance of Securing Software with a Zero Trust Mindset

Security Boulevard

This article is part of a series showcasing learnings from the Secure Software Summit. Zero Trust can improve security, reduce risks, and give organizations greater confidence in the integrity of their IT infrastructure and applications. Zero Trust does not mean your environment cannot be hacked or breached.

Software 104