Explore

FactFableFactFable
“Your Code Is Only as Safe as Its Dependencies” Is the Cybersecurity Awareness Month Lesson Developers Need

“Your Code Is Only as Safe as Its Dependencies” Is the Cybersecurity Awareness Month Lesson Developers Need

This Cybersecurity Awareness Month, learn why the open-source dependencies in your code are a major security risk and what developers can do about it.
FactFableFactFable
The Myth That Cloud Security Belongs Only to the Platform Team

The Myth That Cloud Security Belongs Only to the Platform Team

Discover why treating cloud security as the sole job of a platform team is a failing strategy and how a shared responsibility model leads to better outcomes.
FactFableFactFable
11 Software Supply Chain Checks to Run During Cybersecurity Awareness Month

11 Software Supply Chain Checks to Run During Cybersecurity Awareness Month

Use Cybersecurity Awareness Month to secure your applications by performing these 11 essential software supply chain security checks.
TrendlineTrendline
GitLab Introduces New Capabilities for Governed Software Factory to Enhance AI-Generated Software Development

GitLab Introduces New Capabilities for Governed Software Factory to Enhance AI-Generated Software Development

GitLab Introduces New Capabilities for Governed Software Factory to Enhance AI-Generated Software Development
FactFableFactFable
The Real Reason the Future of Environment Variables Was Designed the Way It Was

The Real Reason the Future of Environment Variables Was Designed the Way It Was

Explore the evolution of environment variables, from their simple Unix origins to the sophisticated, secure secrets management platforms of today.
FactFableFactFable
The Package Registry Detail That Can Hide a Supply Chain Attack

The Package Registry Detail That Can Hide a Supply Chain Attack

A single, overlooked line in a software package's configuration can be the entry point for a devastating supply chain attack. Here's what it is.
FactFableFactFable
Cybersecurity Awareness Month Developer Risks Ranked by Build Pipeline Exposure

Cybersecurity Awareness Month Developer Risks Ranked by Build Pipeline Exposure

For Cybersecurity Awareness Month, we rank the top developer risks found in the software build pipeline, from dependency abuse to poisoned builds.
FactFableFactFable
“The Cloud Is Someone Else’s Risk Surface”: The Cybersecurity Awareness Month Lesson Engineers Need

“The Cloud Is Someone Else’s Risk Surface”: The Cybersecurity Awareness Month Lesson Engineers Need

For Cybersecurity Awareness Month, engineers must learn a critical lesson: moving to the cloud means inheriting a new and complex set of security risks.
FactFableFactFable
How to Run a Dependency Audit During Cybersecurity Awareness Month

How to Run a Dependency Audit During Cybersecurity Awareness Month

A practical guide for development and security teams on how to conduct a software dependency audit to improve your organization's security posture.
FactFableFactFable
The Hidden Vulnerability Behind Kubernetes Security

The Hidden Vulnerability Behind Kubernetes Security

Kubernetes is powerful, but its greatest strength—flexibility—is also the source of a hidden vulnerability that many organizations overlook.
FactFableFactFable
Why Cybersecurity Awareness Month Is a Product Problem, Not Just an IT Problem

Why Cybersecurity Awareness Month Is a Product Problem, Not Just an IT Problem

Cybersecurity Awareness Month often focuses on user error, but the real issue may lie in product design that makes security difficult.
TrendlineTrendline
Alpine Linux Docker Images Face Python Package Compatibility Issues

Alpine Linux Docker Images Face Python Package Compatibility Issues

Alpine Linux Docker Images Face Python Package Compatibility Issues