Category: Checkmarx
Post-Pandemic Responsibilities for a Modern Day CISO
As organizations worldwide adjust to what’s being called the “new normal,” especially in the digital context, roles, and responsibilities of all employees from the top down are looking different going forward – especially CISOs. From enabling
Application Security: Turbulence Often Leads to Transformation
The COVID-19 pandemic is inescapably modifying working conditions, forcing unwanted budget cuts, altering the broad terrain of security technologies, and is putting further emphasis on doing more with less. Few can dispute that automation of
On the Road to DevSecOps: Security and Privacy Controls per NIST SP 800-53
In the context of software security, in section SA-11, DEVELOPER TESTING AND EVALUATION beginning on page 267, this control requires the developer of the system, system component, or system service, at all post-design stages of system
Integrating Checkmarx Security Results within GitLab
Announced today, we’re thrilled to share that CxSAST, CxSCA, and CxCodebashing all now integrate seamlessly within GitLab’s ecosystem via CxFlow: Checkmarx’s scan and result orchestration application. The automation and integration of
You Better Get Going with Go
Well, this is basically my story too. I left Node.js as well, and now I use the Go Language (Golang, Go) as my backend technology of choice. Although Node.js will always have a warm place in my heart, if you are looking for the best backend
Privilege Escalation on Meetup.com Enabled Redirection of Payments
As a result of our investigations, which are further detailed in this technical report, we found several “more-common” API security issues like Lack of Resources & Rate Limiting and Excessive Data Exposure, as well as serious cross-site
On the Road to DevSecOps: Securing the Software Driving Mobility
However, the increasing number of applications and software-driven components are also associated with an increase in software-related risks. Every new service, component, endpoint, and API represents a new point of attack that criminals can
On the Road to DevSecOps: Top Three Benefits of CxFlow
Pertaining to development tools, DevOps is also about automation of the different tooling in use that improves the speed of software delivery. Designed primarily for those embarking on DevSecOps initiatives, Checkmarx CxFlow integrates security
Mutation Cross-Site Scripting (mXSS) Vulnerabilities Discovered in Mozilla-Bleach
According to documentation, “Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes and is intended for sanitizing text from untrusted sources.” In simpler terms, Bleach is a very user-friendly HTML
The Road to DevSecOps: Addressing the Challenges of AppSec Awareness
Stephen: Since our world relies heavily on software, today more than ever before, software must equal security. In this context, what are your thoughts on the origin of software vulnerabilities? Recently, I had an opportunity to sit down withLoad More