EU steps up to fill gaps caused by problems with the NVD and CVE — at a time when software risks are on the rise. Here's what you need to know.

Triaging and patching, plus meeting compliance demands, all bog down modern software teams — and divert time away from development.

As digital threats grow more sophisticated and widespread, the demand for innovative cybersecurity solutions has never been greater. Across Europe, a new generation of startups is rising to meet this…

The software supply chain incident highlights how quickly threat actors can turn newly revealed vulnerabilities into widespread attacks.

Earlier this year, the NIST National Cybersecurity Center of Excellence published an initial public draft of NIST

ReversingLabs provides tools to detect the CONTI ransomware family - a leading ransomware as a service outfit

In this product release highlight, ReversingLabs is proud to announce new features for Spectra Analyze (formerly A1000).

Policy as Code is emerging as a key area of focus for application security teams in the age of cloud-native software development. But implementation can be daunting.

Software Supply Chain Security, Threat Intelligence, and Threat Analysis Solutions

Unless you’re someone who lives and breathes cybersecurity, chances are you didn’t think much about authentication, network exposure, or what happens if someone else finds your server. This guide isn’t here to kill the excitement—it’s here to help you use…

Application security pros need to be ready to cope with security at the speed of code. Here's how to get a handle on modern software risk.

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.

DevEx is an approach that leading firms use to achieve application security gains at speed. Here's how it works — and how to get started.

Researchers at Black Hat discussed how these tools can leave development teams vulnerable to hacks like remote-code execution.

The eslint-config-prettier package exposed more than 10,000 dependent projects. The incident highlights the growing risks in automated dependency updating.

Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.

As AI agents become more autonomous, data integrity is key. How can we ensure security for machine-to-machine interactions?

Here's how to integrate AI-specific risks into your existing security incident response (IR) playbook.

Scott Culp’s formulation still holds true — though some additions are needed that account for software supply chain security. 

Integrated security in AI assistants could help to catch code flaws — but they are only one layer in a comprehensive AppSec strategy.