Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AST

synopsys

Synopsys and NowSecure join forces

Aug 8, 2023 By Vishrut Iyengar In Synopsys
Synopsys + NowSecure partnership delivers automated, continuous MAST solution. Mobile applications have become an integral part of our daily lives, and with their increasing prevalence, the need for robust security measures has never been more critical. Recognizing this, Synopsys is enhancing its mobile application security testing (MAST) offering through a strategic partnership with NowSecure.
Read Post
code intelligence

Code Intelligence Finds New Vulnerability in protobufjs: CVE-2023-36665

Jul 13, 2023 By Code Intelligence In Code Intelligence
As part of Code Intelligence's ongoing efforts to improve the security of open-source software it continuously tests open-source projects with its JavaScript fuzzing engine, Jazzer.js, in Google's OSS-Fuzz. Recently Code Intelligence uncovered a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665) using its newly integrated Prototype Pollution bug detector. The vulnerability puts affected applications at risks of remote code execution and denial of service attacks.
Read Post
bearer

We benchmarked top SAST products, and this is what we learned

Jul 13, 2023 By Guillaume Montard In Bearer

When we started to build Bearer, we wanted to understand how to validate the quality of our findings and be able to benchmark it. Code security scanning solutions are notorious for reporting a lot of false positives and other deficiencies, and even though we believed we could do much better, we needed a way to prove it. In Java, there is an OWASP project, BenchmarkJava, which makes it easy to compare the output of two software security solutions.

Read Post
code intelligence

26 AI Code Tools in 2024: Best AI Coding Assistant

Jul 13, 2023 By Alexander Thiam In Code Intelligence
Generative AI unleashed a whole series of new innovations and tools to the masses in 2023. From AI chatbots to image generators to AI coding assistants, there is just so much to consider, and there are more and more being launched every day. In this guide, we will look at how AI is changing the world of software development by showcasing 26 AI coding tools that are helping developers produce high-quality software more efficiently.
Read Post
synopsys

Consolidation: The wave of the (AST) future

Jul 11, 2023 By Jim Ivers In Synopsys
Reducing complexity and providing insight into software risk, consolidation is the wave of the application security testing future. As the convergence of economic and practical factors increases pressure on organizations to streamline their application security (AppSec) initiatives, consolidation is emerging as a practical solution.
Read Post
code intelligence

New Vulnerability in protobuf.js: Prototype Pollution - CVE-2023-36665

Jul 4, 2023 By Roman Wagner In Code Intelligence
We have found a new Prototype Pollution vulnerability in protobufjs (CVE-2023-36665). The maintainer of protobufjs has issued an update that fixed the issue on 27 June 2023. The vulnerability was discovered by Peter Samarin using Jazzer.js with our newly integrated Prototype Pollution bug detector. This finding emerged in part from our collaboration with Google's OSS-Fuzz and puts affected applications at risk of remote code execution and denial of service attacks.
Read Post

What is Dynamic Application Security Testing (DAST)?

Jun 1, 2023 By Noname Security In Noname Security
Dynamic application security testing (DAST) is an automated security testing technique that is used to identify vulnerabilities in web applications. The best DAST tools simulate various types of attacks to detect security vulnerabilities and test a broad spectrum of endpoints including hidden values. By simulating malicious attacks on an application, automated DAST security tools can help identify outcomes that are far outside typical user experience.
View Video
Subscribe to AST

Copyright © 2024 OpsMatters™. All rights reserved.