Collaborate Disseminate
Google introduces Mobile VRP bug bounty program for vulnerabilities in its mobile applications.
The post Google Launches Bug Bounty Program for Mobile Applications appeared first on SecurityWeek.
Continue reading Google Launches Bug Bounty Program for Mobile Applications
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
The post Red Hat Pushes New Tools to Secure Software Supply Chain appeared first on SecurityWeek.
Continue reading Red Hat Pushes New Tools to Secure Software Supply Chain
Cloudflare introduces Secrets Store, a new solution to help developers and organizations securely store and manage secrets.
The post Cloudflare Unveils New Secrets Management Solution appeared first on SecurityWeek.
Continue reading Cloudflare Unveils New Secrets Management Solution
AppSec teams are stuck in a catch-up cycle, unable to keep up with the increasingly rapid, agile dev pace, and playing security defense via an endless and unproductive vulnerability chase, according to Backslash Security. Costly ‘defensive tax’ Notably… Continue reading Inadequate tools leave AppSec fighting an uphill battle for cloud security
Lineaje introduces SBOM360 Hub, an exchange allowing software producers, sellers, and consumers to publish, share and use SBOMs and related compliance artifacts.
The post New SBOM Hub Helps All Stakeholders in Software Distribution Chain appeared first… Continue reading New SBOM Hub Helps All Stakeholders in Software Distribution Chain
Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.
The post Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination … Continue reading Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination Suit
OpenSSF has added four new members and is receiving $5 million in funding for its Alpha-Omega open source software security project.
The post OpenSSF Receives $5 Million for Open Source Software Security Project appeared first on SecurityWeek.
Continue reading OpenSSF Receives $5 Million for Open Source Software Security Project
GitHub makes push protection generally available to warn developers whenever they include a secret in a commit.
The post GitHub Secret-Blocking Feature Now Generally Available appeared first on SecurityWeek.
Continue reading GitHub Secret-Blocking Feature Now Generally Available
Open banking can be described as a perfect storm for cybersecurity. At one end, small startups with financial acumen but little or no security expertise or resources, are rushing new products to market.
The post Open Banking: A Perfect Storm for Secur… Continue reading Open Banking: A Perfect Storm for Security and Privacy?
CISA has opened proposed guidance for secure software development to public review and comment.
The post CISA Asks for Public Opinion on Secure Software Attestation appeared first on SecurityWeek.
Continue reading CISA Asks for Public Opinion on Secure Software Attestation