CircleCI

AUGUST 4, 2022

When creating an application, developers often rely on many different tools, programs, and people. This collection of agents and actors involved in the software development lifecycle (SDLC) is called the software supply chain. Code signing is also helpful when working in a team environment.

Software Review 98

Software Review SDLC Malware Authentication 98

Tenable

OCTOBER 14, 2022

14 | DevOps team culture is key for supply chain security | SecOps gets more challenging as attack surface expands | Weak credentials hurt cloud security | Incident responders grapple with stress | Security spending grows | And much more! . 1 – Google’s DevOps report zooms-in on supply chain defense.

Security 52

Security Weak Development Team Retail Software Review 52

Coveros

JANUARY 17, 2023

A threat actor gained access to the development environment using a developer’s compromised endpoint and took portions of source code and some proprietary LastPass technical information. It appears no data was stolen, nor malware, nor extortion. Google Cloud 2022 State of DevOps Report. How did it happen? Uber got lucky!

Software Review 52

Software Review Systems Review Weak Development Team Technical Review 52