Page 13 - Software Development Framework News Today

Looking for the latest Government Contracting News? Check out our story: Government's Move to Serverless: Rethinking Security Strategy. Click to read the full

This month marks the one-year anniversary of the discovery of the Log4j2 vulnerability. Technically, it's a 2021 cybersecurity event. However IT and infosec leaders spent much of 2022 hunting for and patching applications using the buggy open-source logging library module. If they're smart, they'll keep doing it in 2023, says one expert. "Many CISOs may

As most have heard by now, the Office of Management and Budget recently issued new cybersecurity guidance as a follow-up to the Biden administration’s executive…

In mid-September, the Office of Management and Budget released a memorandum requiring federal agencies to obtain attestation from software developers before…

With so much unknown about what developers and systems rely on to be productive — and what those tools and code bases rely on in turn — it’s time to get serious about securing the software supply chain.

With so much unknown about what your developers and systems rely on to be productive — and what those tools and code bases rely on in turn — it’s time to get serious about securing your software supply chain.

An open-source program office (OSPO) can act as both gatekeeper and evangelist in an organization’s struggle to ensure ubiquitous open-source components – incredibly useful but vulnerable to bad actors and misuse – are deployed safely and effectively.

On September 14, 2022, the Office of Management and Budget (OMB) issued much-anticipated guidance on the implementation of Secure Software Development Framework (SSDF) requirements for...

Get a handle on essential software development best practices to achieve compliance and risk reduction before directives take effect. The post New government directives and persistent threats reinforce urgency of securing software appeared first on Application Security Blog.

A senior administration official said the White House is beginning with a label that will focus on some of the most at-risk technologies – and that the ...