Security News

eBook: The Art & Science of Secure Software Development
2024-06-18 08:34

Software security requires a creative and disciplined approach. It involves having the vision to develop secure strategy, tactics, and execution. Excelling in the discipline demands thinking...

Researchers call out QNAP for dragging its heels on patch development
2024-05-20 14:00

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

U.K. and U.S. Agree to Collaborate on the Development of Safety Tests for AI Models
2024-04-05 20:13

Figure A. Both countries will now "Align their scientific approaches" and work together to "Accelerate and rapidly iterate robust suites of evaluations for AI models, systems, and agents." This action is being taken to uphold the commitments established at the first global AI Safety Summit last November, where governments from around the world accepted their role in safety testing the next generation of AI models. The MoU primarily relates to moving forward on plans made by the AI Safety Institutes in the U.K. and U.S. The U.K.'s research facility was launched at the AI Safety Summit with the three primary goals of evaluating existing AI systems, performing foundational AI safety research and sharing information with other national and international actors.

Six steps for security and compliance in AI-enabled low-code/no-code development
2024-04-04 05:00

AI is quickly transforming how individuals create their own apps, copilots, and automations. The first is that production environments are no longer welcoming dozens or hundreds of apps but tens and hundreds of thousands of apps, automations and connections - all from users of varying technical backgrounds.

6 keys to navigating security and app development team tensions
2024-04-02 03:00

The security team's animosity toward development teams grows as they view developers as not "Taking security seriously enough." That's why I've decided to share what I've learned from managing the application security team at a large telecom with some success in balancing the tensions between developers and security.

Finding software flaws early in the development process provides ROI
2024-03-29 04:30

The Consortium for Information and Software Quality estimates that the cost of poor software quality in the United States reached $2.41 trillion in 2022. It's also completely avoidable, and software flaws must be avoided with the world's increased dependency on software.

How immersive AI transforms skill development
2024-03-25 05:00

Organizations are becoming more laser-focused on extracting the value of AI, moving from the experimentation phase toward adoption. While the potential for AI is limitless, AI expertise sadly is not.

Using cloud development environments to secure source code
2024-03-21 05:00

In this Help Net Security video, Rob Whiteley, CEO at Coder, discusses the cloud development environment technology landscape and its benefits. From the earliest stages of writing code to deploying finalized applications, CDEs are reimagining the developer experience, gaining traction as the next frontier of programming productivity, collaboration, and security.

Cybercriminals harness AI for new era of malware development
2024-03-01 06:30

Group-IB found these compromised credentials within the logs of information-stealing malware traded on illicit dark web marketplaces. Throughout the reporting period, Group-IB experts uncovered 27 new advertisements for ransomware-as-a-service programs on dark web forums, including well known groups such as Qilin, as well as other collectives that have yet to be seen in the wild.

A step-by-step plan for safe use of GenAI models for software development
2024-02-22 06:00

Since this field has a lot of blanks, it is best to work with trusted experts or outsource the creating and implementing of GenAI practices to someone with expertise in the field. Keep in mind that if an employee uses their personal account for working with ChatGPT, the outcome is their intellectual property, not your company's.