Managing dependencies isn’t just best practice, it is an essential ongoing process. Implement these strategies in your projects to stay ahead of potential issues and ensure your software remains reliable, secure and ...

In recent years, the space industry, much like software development, has experienced rapid transformation. SpaceX has revolutionized space launches with its use of reusable rockets and innovative suppliers ...

Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, ...

A survey of software engineering professions has uncovered disconcerting signs of software supply chain insecurity ...

An analysis of 2.5 million GitHub Actions workflow files belonging to 553,000 organizations and personal users surfaces thousands of potential vulnerabilities ...

ReversingLabs launched a binary analysis tool that uses machine learning algorithms to identify risks before and after apps are deployed ...

In an analysis of more than a million applications, Veracode found 42% contained flaws that remained unfixed for longer than a year ...

OpenText updated a static analysis code auditing tool using machine learning algorithms to provide deeper insights into on-premises IT environments ...

An analysis of the security automation practices of 130 organizations published by Synopsys suggests significant progress toward securing software supply chains ...

Lineaje and Persistent Systems are providing a managed service for remediating open source vulnerabilities that leverages AI technologies ...

The NSA, ODNI and CISA have issued guidance to assist software developers and suppliers in shoring up software integrity and security ...

While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal ...