article thumbnail

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Tenable

Here’s the list of OWASP’s top risks for CI/CD (continuous integration / continuous delivery) ecosystems: Insufficient Flow Control Mechanisms. Inadequate Identity and Access Management. 6 Ways to Optimize Vendor Management Programs ” (IANS Research). What is patch management?" (TechTarget).

article thumbnail

Automating compliance in software delivery

CircleCI

Implementing well-known compliance best practices is a great way to measure your competence in internal corporate governance, risk management processes, organizational oversight policies, vendor management, and general security awareness. Comprehensive testing and change management. How to automate compliance with CI/CD.