Craig Driscoll’s Post

ArmorCode Inc. aims to surface vulnerabilities in an enterprise’s software and infrastructure, including containers and public and private clouds, through “role-specific” dashboards. In addition to threat intelligence tools that score risk and provide suggestions for mitigating attacks, these dashboards provide training targeted at security teams and individual members of those teams. #applicationsecurity #vulnerabilitymanagement #riskmanagement #cyberriskmanagement #venturecapital #privateequity

Security shouldn't be an afterthought; it should be part of your development DNA. Discover how Codacy Security can help you embed security into your code reviews and make every line of code more secure. Read our blog to learn more. ⤵️ https://lnkd.in/dEq7ry9w #CodacySecurity #DevSecOps #SoftwareDevelopment

We had a fireside chat with Ian Livingstone about software security and it was enlightening. Here he highlights the importance of communication between security and development teams in addressing software vulnerabilities. The need for context in resolving these issues effectively was a key point. EchoLayer enhances this dynamic by simplifying collaboration and enabling quick remediation of vulnerabilities through detailed enrichment and attribution. EchoLayer is the single pane of glass to enrich and remediate your vulnerabilities quickly. Watch this fun fireside chat here: https://lnkd.in/gn7vaDZ4 Want to see how EchoLayer can help your team close vulnerabilities quickly? DM me and we can hangout and talk shop! 🤘🏻 #applicationsecurity #appsec #devsecops #engineering

CVE-2024-23917, this #critical #severity #flaw impacts all versions of TeamCity On-Premises from 2017.1 through 2023.11.2 and can be exploited in remote code execution (#RCE) attacks that don't require user interaction. #remotecodeexecution #teamcity https://lnkd.in/dXj6mY9r

HACKYX The aim of this project is to easily find any resource related to IT security like CTF writeup, article or Bug Bounty reports Author: Aituglo Visit: https://hackyx.io/ #Hacking #infosecurity #infosec #Pentesting #redteam #pwn #CyberSecurity #CTF #CyberSecurity #ArtificialIntelligence #CyberSecurityAwareness #BugBounty #bugbountytips

Last year, I had the wonderful opportunity to speak at DevFest, and while I could share countless stories, today's narrative delves into my presentation: 'The Little Things Matter.' In my talk, I unveiled simple yet efficient steps that can dramatically enhance your application's security, all achievable within an hour to a day. Recognizing the significance of these minor yet impactful changes, I've initiated a series to delve deeper into each aspect that can revolutionize your application's security. Join me in this insightful journey by starting with Episode 1 of 'The Little Things Matter - Unveiling the Mystery of Secure Code.' Join me on this Journey. https://lnkd.in/dRxsGycv #SecureCoding #DevFestReflections

The CrowdStrike crash is a warning for developers and companies alike. Whether we like it or not, 𝗯𝘂𝗴𝘀 𝗵𝗮𝗽𝗽𝗲𝗻 𝗮𝗹𝗹 𝘁𝗵𝗲 𝘁𝗶𝗺𝗲. Luckily, your bugs most likely won't be as disastrous as CrowdStrike's bug. But even the slightest syntax error can lead to terribly unwanted consequences. Before you get too stressed about the code you're writing, you should know this: it won't be your responsibility alone. Making quality software is a team sport that necessitates many best practices, such as code reviews and testing. The onus is on leadership to ensure these practices are done diligently, too. So, how can we prevent incidents like the CrowdStrike crash? I unpack it in my latest post on the Letters to New Coders Substack. Check it out below. 🔗 https://educat.tv/4d9oyQv #LearnToCode #CrowdStrike

Don’t let your #appsec team get swarmed with vulnerabilities. 🐝 Remove the guesswork and gain visibility by implementing #codesecurity. ICYMI, Lacework #CodeSec helps security and dev teams: 💪 Decrease time-to-resolution with insight into the code owner and remediation status 💪 Trace vulnerabilities in runtime back to source code 💪 Fix risks early in development and prevent small issues from escalating https://okt.to/A2fpzX #IaC #CloudSecurity #SourceCode

Did you know that hackers are using APIs (application programming interface) to target businesses? APIs are commonly used to allow different software programs to communicate with each other, but they hold lots of sensitive information.     Damon Fleury, Chief Product Officer of SpyCloud gives tips on how to fix the problem and take action. Read more in Forbes:  https://lnkd.in/dAqpVB5x    #ClientLove #TheSageWay 

Thrilled to share that our incredible team has just unveiled Cycode's Complete ASPM Platform & ConnectorX! 🎉 In a market filled with buzz around ASPM products, we’ve really brought to market a stand out solution that customers love and that truly helps companies ship secure software faster. 🚀 What sets us apart? A Complete ASPM, no gimmicks. This isn't just another tool to add to your appsec stack. It's a platform that delivers value in 5 minutes, streamlining Cycode's native scanning across (SAST, SCA, Secrets, IaC, etc.) or any of your 3rd party tools via all-new ConnectorX, so you can drive consolidation and efficiency. Enhancements to our Risk Intelligence Graph (RIG) providing complete code-to-cloud traceability, automating vulnerability discovery, prioritization, and remediation. With amped up risk scoring capabilities to pinpoint the 1% of critical vulnerabilities that truly matter to enterprises. 🎯 Exciting times ahead as we continue to empower teams, enhance security and provide a peace of mind to every piece of code! 💪 p.s. Special shoutout to the people behind the scenes that made this launch happened Amir Kazemi, Guy Boyarski, Lotem G., Barak David Mizrahi, Julie Peterson, Karina Ferdi Cycode | Peace of Mind p.p.s you can read more about the launch on our website or on Dark Reading (links in the comments). #aspm #cycode #applicationsecurity #devsecops #cybersecurity