Recent Searches

Home
Release Secure Code Faster
Webinar: Discover DevSecOps with Atlassian and Checkmarx

Webinar: Discover DevSecOps with Atlassian and Checkmarx

Published Date December 15, 2021

Fill form to unlock content

Loading, please wait

Error - something went wrong!

Watch the Webinar

Thank you!

Previous Article

APACHE LOG4J RCE – Variants and Updates

This is the MOST RECENT update to our previous research blog: APACHE LOG4J REMOTE CODE EXECUTION – CVE-2021-44228 On December 9th the most critical zero-day exploit in recent years was disclosed,...
Next Flipbook

2021 Software Security in LATAM Survey Report - Spanish

Recommended Resources

1 day ago
Open Source Licenses – Insights and Metrics

Every developer and organization which uses open source dependencies in their code should know what open source licenses are and what are the risks that an organization faces when using open...

Read Now
1 day ago
ESG Showcase - Comprehensive Open Source Supply Chain Security: Going Beyond SCA and SBOMs

Read Now
5 days ago
AST Platform Demo

Watch Now
Partnering in a World of Secure Code: Mark Osmond discusses the innovative Checkmarx approach on CRNTV

The software world will always need devoted security innovators, and Checkmarx is fostering global partnerships to better meet the industry’s needs.

Read Now
6 days ago
The Case for Outsourcing AppSec Testing to a Managed Service Provider

Businesses commonly turn to managed service providers to help handle IT processes like data backup and recovery, network management, and mobility management. Here’s another key type of managed...

Read Now
13 days ago
IDC Offers Commentary on Checkmarx Open Source Supply Chain Security Solution

Modern application development must address supply chain security risksSoftware Composition Analysis (SCA) tools are part of, but not the complete solutionVulnerable and malicious are two very...

Read Now
14 days ago
Static Analysis of Infrastructure as Code with Codefresh and Checkmarx

Infrastructure as Code (IaC) is the description of infrastructure (clusters, virtual machines, networking, storage, etc.) with a declarative model and its subsequent management using the same...

Read Now
15 days ago
5 Keys to Success from Checkmarx’s CRN Women of the Channel

Today CRN®, a brand of The Channel Company, announced its highly respected annual Women of the Channel list and I always look forward to seeing all of the amazing leaders who are featured each...

Read Now
19 days ago
Understanding the Development Best Practices Landscape for Modern Secure Application Development

Modern Application Development (MAD) is an approach to developing software applications using cloud-native technologies. The main idea is to leverage newer emerging tools like K8s to bootstrap...

Read Now
19 days ago
2021 Software Security in Latin America Report

Read Now
21 days ago
Attackers Target Packages in Multiple Programming Languages in Recent Software Supply Chain Attacks

Malicious packages in multiple programming languages that went undetected for years were revealed by the Checkmarx Supply Chain Security team using advanced threat hunting techniques. The fact...

Read Now
26 days ago
Securing the Open Source Supply Chain

Watch Now
28 days ago
Attacker Adds Evasive Technique to Their Ongoing Attacks on NPM

Intro A few weeks ago, we wrote about a new threat actor we called RED-LILI and described their capabilities, including an in-depth walkthrough of the automated system for publishing malicious...

Read Now
about 1 month ago
StarJacking – Making Your New Open Source Package Popular in a Snap

Checkmarx supply chain security has recently found a malicious PyPi package with more than 70,000 downloads using a technique we dubbed StarJacking - a way to make an open source package...

Read Now
about 1 month ago
Checkmarx and JetBrains Make Great Apps, Secure Apps

Now developers can utilize hassle-free security whenever they need it The pace of software development is accelerating. The development team is under pressure to continuously deliver as App...

Read Now
about 1 month ago
Open Source Licenses – Understanding the Risk Factors

Following our recent blog post on what are open source licenses, their types, and their limitations, in this post, we will dive into the risks for being a non-compliant business, and how an...

Read Now
about 2 months ago
Open Source Licenses – Everything You Need to Know

What are Open Source (OS) Licenses? OS dependencies are being used very broadly among developers due to their amazing benefits.Studies show that ~85–97% of the software applications rely on OS...

Read Now
about 2 months ago
DevOps Security | KraLv Maga | Lugapel

Watch Now
about 2 months ago
All You Need to Know about Spring Framework Vulnerabilities

On March 29th, 2022, two separate RCE (Remote Code Execution) vulnerabilities related to different Spring projects were published and discussed all over the internet. In addition, a third...

Read Now
about 2 months ago
New Protestware Found Lurking in Highly Popular NPM Package

Does Protestware undermine the trustworthiness of OSS ecosystems? Two popular packages, “styled-components” and “es5-ext”, with millions of weekly downloads and thousands of dependent projects,...

Read Now

Return to Home