If one event demonstrated how vulnerable organisations and infrastructure around the world are to software vulnerabilities, it was Log4j. The critical zero-day vulnerability in the Java logging ...

CISOs should treat secrets sprawl as a governance challenge. This means enforcing clear ownership, adopting short-lived ...

Software security may finally be getting the attention it deserves as more countries institute necessary guidelines. But with threats increasing against the software supply chains, it is too soon to ...

Stoyan Mitov is the CEO of Dreamix, a custom software development company helping tech leaders increase capacity without giving up quality. As we continue to embrace the digital age, security is ...

SUNNYVALE, Ca.--(BUSINESS WIRE)--In response to rising software supply chain attacks, BlueFlag Security is delivering enhanced capabilities within its platform for software development life cycle ...

One year after the Log4j disaster, open source community efforts and new developer toolchains are addressing the challenges of software supply chain security. Early December marked the one-year ...

Continuous integration/continuous development (CI/CD) pipelines may be the most dangerous potential attack surface of the software supply chain, researchers say, as ...

A monthly overview of things you need to know as an architect or aspiring architect. Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with ...

The third white paper in our series, “Building an AI Chip” delves into the critical aspects of ensuring robust security and efficient software development for AI chips. As AI applications become ...

Why bugs and misconfigurations pose as much of a cyber threat as hackers.

In the technology field, what seems niche today often becomes tomorrow’s industry standard—and that’s definitely true of software development. From test-driven design and AI-powered code reviews to ...