As a reporter for a publication focused on software development two years ago, I wrote a couple stories about how first software was developed so it did what it was designed to do, then they’d worry ...

In last week's column, I talked to Bruce Schneier about complexity, one of the main reasons it will be hard for computer security to improve in the future. As software becomes more complex, in terms ...

DevSecOps, short for Development, Security, and Operations, is a methodology that integrates security practices into software Development Operations (DevOps). It emphasizes that security should be a ...

For all the scary talk about cyberattacks from vendors and industry experts, relatively few attacks are actually devastating. But the Jaguar Land Rover (JLR) attack was. The JLR breach wasn’t some ...

Checkmarx today announced that its Checkmarx One for Government application security platform has achieved FedRAMP Moderate Certification and is now listed in the FedRAMP Marketplace. The ...

Microsoft is using AI and MDASH to find Windows vulnerabilities faster and improve security update reliability.