October 27, 2022

OWASP at a crossroads: Founder Mark Curphey's call for relevance in the age of DevSecOps

After two decades of raising awareness about the big problems in application security, the Open Web Application Security Project (OWASP) stands at a crossroads. Founder Mark Curphey outlines his manifesto for modernization.
October 26, 2022

Google pairs GUAC with SLSA to take a bite out of software supply chain insecurity

Are you ready to dip into this tasty repo for better software security?
October 19, 2022

Devs: Don’t rely on GitHub Copilot — legal risk gets real

GitHub’s Copilot ML code-completion engine is violating copyright wholesale, say high-profile open source advocates.
October 12, 2022

Packagist PHP repo supply chain attack: 3 key takeaways

A PHP repository vulnerability threatened millions of sites. Here's why you need to make an SBOM the first step in your software supply chain security journey.
October 6, 2022

Memory-safe #RustLang shines with its day in the sun

Don’t miss out on the new hotness (or on Linus’s rant). Have you woken up to the memory-safe language?
October 4, 2022

Gartner explains why SBOMs are critical to software supply chain security management

With modern software development practices leaning heavily on third-party sources — and attacks surging on that software supply chain — Gartner expects SBOM adoption to go from 5% to 60% in 2025.