Articles about Source code

Almost 70 percent of DevSecOps professionals can't detect AI source code origins, creating massive security risks, according to a new report.

The study from JFrog finds the majority of software developers and cybersecurity teams are lacking well-defined AI and Machine Learning (ML) source code usage visibility, provenance, and governance, leaving many organizations at risk.

Continue reading →

Most organizations find themselves in the midst of their API security journey, racing to keep pace with expanding API ecosystems in a colossal threat landscape. As a core enabler of modern applications, facilitating seamless connectivity and powering mobile and web applications, APIs are everywhere. The DevOps revolution has completely transformed the pace at which developers can design and build APIs faster than a security team can match. 

Large enterprises are operating with tens of thousands of APIs, and even small organizations have a surprising number, both internal and external. With applications and API portfolios becoming increasingly complex, maintaining a comprehensive understanding of all existing APIs has emerged as a significant hurdle. As APIs can quickly become obscured or forgotten, many organizations lack accurate context into the sheer scale and volume of APIs that persist across their infrastructure -- subsequently resulting in the absence of a full picture of their attack surface. As one cannot secure what they cannot see, the absence of discovery mechanisms opens organizations to a host of security risks.  That is why API discovery is now a crucial process for security teams, designed to identify, catalog, and assess APIs. 

Continue reading →

The number of major data leak incidents as a result of exposed credentials rose by 50 percent in 2021 according to a new report.

The 2021 industry report from CybelAngel finds data leaks are the most common digital risk faced by enterprise customers, with leaks overall showing a 63 percent year-on-year growth.

Continue reading →

Increasingly developers are reliant on code modules that weren't created in house and when it comes to debugging applications this third-party code can present a problem.

Now though debugging platform Rookout is announcing new functionality that makes it easier for developers to debug other people's code.

Continue reading →

It is only a matter of weeks since the source code for Windows XP and various other Microsoft products leaked online. While the best part of two decades old, many people were eager to take a look at the code for the operating system, including people looking for code reused in Windows 10 that could be exploited.

Microsoft jumped to action, started an investigation, and took steps to try to stem the spread of the source code. But the company was surprisingly slow at removing the code from its own site after someone uploaded it to GitHub.

Continue reading →

Torrents have appeared online containing the source code for Windows XP, Windows 2000, and other software from Microsoft. Shared on the notorious 4chan, a collection of files approaching 50GB in size also include the source code for Windows Server 2003, Windows NT and MS DOS.

The leaker justifies their decision to share the source code saying that "information should be free and available to everyone", and that to hold onto it for themselves would be an "evil act". The leaker also cheekily points out that Microsoft should be happy that the source code is publicly available given the company's current embracing of open source.

Continue reading →