Maikel Mardjan·Dec 19, 2025Crack the Code: Weakness vs. VulnerabilityIn today’s digital world, security remains a critical concern. This applies equally to Python software.Python is the most widely used…
Taylor Armerding·Dec 16, 2024Control systems exposure puts critical infrastructure at riskIndustrial control systems run most of the nation’s critical infrastructure. Too many of them are vulnerable to hackers.
Taylor Armerding·Dec 9, 2024Both good and bad guys showing that LLMs aren’t ready for prime timeLarge language models—the brains behind artificial intelligence—keep getting better, but still need lots of improvement,
Taylor Armerding·Dec 2, 2024These software packages contain “presents” you don’t want to openMalicious hackers, instead of waiting for software developers to make mistakes, are trying to trick them into downloading mistakes.
Taylor Armerding·Nov 25, 2024Are there too many “top software vulnerabilities” lists? Or are they the wrong lists?Are there too many lists of top software vulnerabilities? Maybe. Or maybe the lists should be about how to build more secure code.
Taylor Armerding·Oct 15, 2024Cybersecurity awareness should be aimed at software creators as well as usersThe need for better cybersecurity is universal. So an awareness month should apply to those who make software, as well as use it.
Taylor Armerding·Oct 8, 2024Report: Build trust (and speed) in your software with DevSecOpsA new report by Black Duck documents the need for improvement in DevSecOps, along with recommendations on how to improve.
Taylor Armerding·Oct 1, 2024One of software’s oldest vulnerabilities persists, even when fixes are availableThere are fixes available for cross-site scripting software vulnerabilities. Why aren’t they being used more often?
Taylor Armerding·Sep 23, 2024Are you plagued by software testing tool sprawl? Get to know ASPMSoftware security testing tool sprawl remains a problem. But ASPM can help to mitigate it.
Rohan Raman·Mar 17, 2024Encapsulation in Real World: Bundling Data and MethodsIn programming, encapsulation refers to the bundling of data and methods within a single unit, commonly known as a class in object-oriented…
