Tag

secure coding

44 articles

Latest in secure coding

Blogs

Security Teams Are Fixing Vulnerabilities Faster Than Ever. So Why Is Software Getting Riskier?

AI is speeding up dependency decisions, making point-of-selection security essential for reducing vulnerable components, downstream tickets and avoidable rework.

Oct 6, 20263 min

All secure coding Articles

Showing 1–24 of 44

Sep28

Blogs

GitHub’s Security Autofix Agent Now Remembers What It Fixed

GitHub’s agentic autofix now uses Copilot Memory to reuse repository-specific security fix patterns, helping Copilot apply lessons from past vulnerabilities across future alerts, r…

3 min

Aug19

Blogs

Are LLMs Equally Good (or Bad) at Building Secure Software?

An SCW study finds a large variance in how frontier and budget LLMs perform across different frameworks, and explains the striking cost variance.

3 min

Aug04

AI is Coding Us Into a Corner

AI-powered patching and coding is putting us on a track towards a deepening dependency on future frontier models. The modern tools we use today to fix yesterday’s coding problems a…

3 min

Jan28

Anthropic Adds Automated Security Reviews to Claude Code

Anthropic pulls security into the inner dev loop with new Claude Code tools that scan for vulnerabilities in the terminal and on every pull request—before insecure code ever ships.

3 min

Dec19

Surprise! Everybody Uses AI Tools for Software Development, Few Do So Securely

AI is generating code faster than teams can secure it, widening software supply chain risk and exposing major gaps in AppSec and governance.

3 min

Nov06

Application Performance Management/Monitoring

5 Pillars of Successful Web App Development

Today, building a high-quality and competitive web application requires more than just clean code, a user-friendly UX and good development practices. The success of such a project…

3 min

Oct21

Blogs

Sonar Previews Service to Improve Quality of AI Generated Code

Sonar’s SonarSweep improves AI-generated code by reducing bugs and vulnerabilities, helping organizations train more reliable AI models.

3 min

Oct14

Blogs

Secure By Design, Secure by Default

“Shift left” alone won’t secure software. Real security must be embedded continuously across design, development, and production—not just moved earlier.

3 min

Aug28

Coding at the Speed of AI: Innovation, Vulnerability, and the GenAI Paradox

Generative AI accelerates software delivery but also reintroduces vulnerabilities, making secure coding practices, oversight, and developer training essential for safe adoption.

3 min

Feb02

API

Graylog Makes Free API Security Tool Available to Developers

A free version of Graylog’s API security platform is intended to encourage developers to adopt best practices to secure APIs.

3 min

Jul28

Snyk Survey: AI Generating More Vulnerabilities in Code

A Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox.

3 min

May17

Blogs

DevOps Security: Your Complete Checklist

In a fast-paced environment like DevOps, your security strategy needs to be even more agile. While moving fast is great for delivering application features and functionality, speed…

3 min

May09

Blogs

GitGuardian Survey Surfaces Secrets Management Challenges

A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting t…

3 min

Apr27

Blogs

Codenotary Previews Secure SBOM Creation Service

Codenotary today made available a preview of a centralized repository service for generating and storing software bills of materials (SBOMs) that makes it simpler to securely share…

3 min

Apr25

Blogs

Cycode Adds ASOC Module to Streamline DevSecOps Workflows

Cycode has added a module to its platform for mapping metadata and events using graph technology that makes it simpler for application development and cybersecurity to consolidate…

3 min

Mar20

Best Practices

5 Unusual Ways to Improve Code Quality

Code quality refers to how well-written and maintainable software code is. It encompasses factors such as readability, efficiency, scalability, reliability, maintainability and sec…

3 min

Jan05

Blogs

Will DevSecOps Replace the Security Operations Center?

Traditionally, a security operations center (SOC) is a physical facility where an organization performs information security activities. The SOC team analyzes and monitors the orga…

3 min

Sep29

Blogs

What Developers Need for Software Security Success

Given today’s evolving threat landscape, organizations and businesses in every sector now have a critical need to produce secure software. Criminal gangs, professional attackers an…

3 min

Aug16

Blogs

Avoiding Security Review Delays

In the summer of 2021, I had lunch with a senior security developer at one of Seattle’s leading tech firms. Even though we were relaxed in the sunny and cool afternoon of the Pacif…

3 min

Aug11

Blogs

What GitHub’s 2FA Mandate Means for Devs Everywhere

Multifactor authentication (MFA) is becoming increasingly standard within software development organizations, with GitHub recently announcing that two-factor authentication (2FA) w…

3 min

May20

Blogs

Managing Hardcoded Secrets to Shrink Your Attack Surface

The practice of hardcoding secrets—such as authentication credentials, passwords, API tokens and SSH Keys—as non-encrypted plain text into source code or scripts has been common in…

3 min

May13

Blogs

15 Ways Software Becomes a Cyberthreat

Software is an integral part of private and commercial life; there is no way around it. You need software to do your taxes, book a flight or browse the internet. Software has made…

3 min

Apr20

Blogs

Shift Left is Only Part of Secure Software Delivery

We’re living in the age of accelerated consumption and delivery. You can get a seemingly infinite selection of products delivered to your door within two days, for free, from thous…

3 min