Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The latest News and Information on Application Security including monitoring, testing, and open source.

Gartner's 2025 Guide to Buying AppSec Tools & 5 Mistakes to Avoid

Choosing the wrong AST (Application Security Testing) platform doesn't just waste your budget. It leads to: In its latest research, “How to Avoid Common Pitfalls in Selecting Application Security Testing Tools,” Gartner highlights the five most common mistakes security leaders make when evaluating AST platforms. In this blog, we break down Gartner’s key insights and share what teams should look for when choosing a tool that works in the real world.

Security-Conscious AI Software Development with Windsurf x Aikido

Modern development teams do far more than simply write code. Now, with the help of AI, software development organizations are orchestrating its creation, maintenance, and delivery at a bigger scale than ever before. Tools like Windsurf and Devin from Cognition help developers across the Software Development Lifecycle (SDLC) by augmenting people with multi-step reasoning agents that can write code.

PII Exposed in Your Logs? Fix It Fast With Observability Pipelines

Help keep your logs secure before they leave your environment. In this video, we’ll show you how to use Datadog Observability Pipelines to easily discover, classify, and mange sensitive information—like PCI, PII, or custom patterns—from your logs on-premise to support compliance needs. You’ll learn how to: Whether you’re in DevOps, Security, or Compliance, this workflow helps support your data privacy initiatives without disrupting your existing logging setup.

Building Security Programs That Actually Scale - with Bonnie Viteri | Secrets of AppSec Champions

Building great security programs takes more than checklists and best practices—it takes vision, collaboration, and adaptability. In this episode, Bonnie Viteri, Principal Technical Security Engineer at Yahoo, shares how to build scalable, resilient programs that evolve, survive leadership turnover, and actually provide value to the business.

Security Staff Shortage: The Silent Crisis in #Tech! #appsec

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

6 Best CASB Solutions for 2025: Cloud Access Security Broker Tools Compared

Searching for the best way to protect your cloud data, apps, and users in 2025? This guide compares the top CASB tools and their features and helps you choose the right cloud access security broker solution for your business.

Phishing Scams: How to Spot & Stop Video Call Attacks! #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Top 5 Cloud Security Mistakes and How to Avoid Them

In the modern business environment, the use of cloud technology in doing business is gaining importance. It is flexible, cost-effective, and enables teams to work remotely. However, there is also a lot of responsibility that comes along with such convenience, in this case, security of your cloud environment. The truth? There are numerous organizations, which make easy to perform moves that endanger their data and operations. Fortunately, the majority of these pitfalls may be avoided through proper awareness and equipment.

Account Takeover Nightmare: Why You're Always Fighting Fires! #appsec #cybersecurity

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

Streamline AppSec Remediation with Seemplicity + Inspectiv

Security teams today are inundated with findings from a dozen different tools. They’re dealing with everything from scanner alerts to bug bounty reports, often in different dashboards, formats, and workflows. Organizations use, on average, eight tools that generate exposure findings (Seemplicity Year in Review Report), and over 50% of security professionals say managing all that noise is a major challenge (The 2025 Remediation Operations Report).