SDLC Archives - Securezoo

GoCD patches ‘Highly Critical’ authentication vulnerability

Application Security, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / October 29, 2021 October 29, 2021 / CI/CD, CICD, developer, GoCD, SDLC, Software

GoCD has patched a Critical authentication vulnerability in its GoCD CI/CD tool.

Malicious PyPI software packages found stealing payment card numbers and injecting code

Application Security, Malware, Vulnerabilities & Exploits / By Frank Crast / August 5, 2021 August 5, 2021 / JFrog, noblesse, PyPl, Python, SDLC, ShadowHammer, Supply Chain

Security researchers have discovered malicious software packages from Python’s official third party software package repository PyPl stealing payment card numbers and injecting code.

Microsoft introduces Application Inspector

Application Security, Cybersecurity Articles / By Frank Crast / January 21, 2020 February 1, 2020 / API, Application, Application Inspector, AppSec, AWS, Azure, Cloud, Cryptography, Microsoft, Open Source, SDLC

Microsoft has introduced a new source code analyzer tool dubbed Microsoft Application Inspector. The tool is designed to “identify interesting features in source code” and can help enable developers understand software components your apps use.

OWASP API Security Top 10 2019

Application Security, Cybersecurity Articles, Vulnerabilities & Exploits / By Frank Crast / January 3, 2020 February 1, 2020 / API, API Security, Application, AppSec, authentication, Authorization, DOS, jTop 10, OWASP, SDLC, SQLi

The Open Web Application Security Project (OWASP) has released its OWASP API Security Top 10 2019. This is the first version of the API Top 10. OWASP will likely update the guidelines every three to fours years, similar to the other OWASP Top 10 series.

GitHub launches ‘Security Lab’ to help secure open source software

Application Security, Cybersecurity Articles, Security Updates & Patches, Vulnerabilities & Exploits / By Frank Crast / November 18, 2019 February 1, 2020 / AppSec, GitHub, Open Source, SDLC, Security Lab

GitHub, one of the world’s leading software development platforms, has launched GitHub Security Lab with aim to secure open source software.