Micro Focus is now part of OpenText. Learn more >

Pick 'n' Mix candy bar with a selection of wrapped candy and gum in white buckets
Vulnerabilities such as Log4j can have a huge footprint. How do you figure out which applications and products are impacted? Here are four steps to...
Rob Lemos
Feb 25, 2022
How to handle flaws in ubiquitous software
Govern the pick 'n' mix
Applying these three 'Band Aid' lessons correctly will help address software vulnerabilities...
Three lessons from 2021's struggles to keep up with the increased reporting of software vulnerabilities.
Rob Lemos
Feb 21, 2022
How vulnerability data can help you manage software in 2022
Band-Aids not enough
Here's why you need security orchestration, automation, and response functionality on your security operations team.
Rob Lemos
Oct 7, 2021
4 reasons why you need SOAR on your SecOps team
The game has changed
Adopting a threat modeling framework, implementing processes for managing the attack surface, and aggressively pushing automation are key.
Rob Lemos
Aug 24, 2021
State of SecOps 2021: 5 trends that should shape your security approach
Adapt to the new normal
Data masking makes it safer for companies to hold on to data they might need later, but they need to be educated. Here's what you need to know.
Rob Lemos
Aug 12, 2021
The state of data masking: It's essential—so get it right
4 items for your checklist
Here are essential lessons for companies looking to secure their sprawling data, whether on-premises or in the cloud.
Rob Lemos
Jun 21, 2021
Double down on your unstructured data security: 5 key lessons
Remote workforces mean more data sprawl
Why is machine learning so hard? Are better SecOps metrics coming? Resilience is the new way forward. Prep for this year's show with our primer.
Rob Lemos
May 17, 2021
RSA Conference 2021: Are you ready to get resilient?
Get primed for the big show
Here's how companies can quickly teach new hires their approach to development and application security.
Rob Lemos
May 11, 2021
5 ways software teams can fast-track DevSecOps training
It's game on ... team players wanted
Here are the top open-source or free tools to secure your DevSecOps pipeline.
Rob Lemos
Mar 15, 2021
The top open source tools to secure your app sec pipeline
Build out your DevSecOps tool chest
Here's how to find security tools that support all the various functions inside a DevOps team, from development to quality control to operations.
Rob Lemos
Feb 3, 2021
The state of app sec tools: 5 trends shaping the big shift
DevOps maturity matters
The security and resilience of low-code applications remain questionable. Here are five ways to make sure your low-code apps meet the test.
Rob Lemos
Jan 28, 2021
5 ways to make your low-code development more resilient
Why security champions are key
How much should software and application security teams worry? Here are five lessons from top experts that provide a reality check.
Rob Lemos
Jan 20, 2021
Will AI delete your app sec job? 5 lessons for software teams
How to avoid being deprecated
With so many people working remotely, more security is required. Multi-factor authentication is the way to go. Is the solo password's end near?
Rob Lemos
Jan 12, 2021
The state of MFA: 4 trends that portend the end of the solo password
Multi-factor authentication comes of age
In the past, data security focused on data confidentiality. Now it needs to focus on the integrity and availability of data. Here are the top trends.
Rob Lemos
Dec 22, 2020
What your data security team can expect in 2021: 5 key trends
Resilience is the way forward
In the post-pandemic world, application security teams will be tasked with faster development cycles, rather than just finding vulnerabilities.
Rob Lemos
Dec 15, 2020
5 key app sec trends for 2021: The shift is on for software teams
Get your application security up to speed
The effects of COVID-19 on security will outlast the actual pandemic.
Rob Lemos
Dec 10, 2020
What SecOps teams can expect in 2021: 5 key trends
Post-pandemic world emerges for security teams
Software that uses ML, and data scientists who develop the models, need to take malicious behavior into account. Here are five recommendations.
Rob Lemos
Dec 3, 2020
Adversarial machine learning: 5 recommendations for app sec teams
Time to make your move
Application security authorities Chris Romeo and Marc French review a recent survey of software teams to draw out real-world takeaways for your team.
Rob Lemos
Nov 18, 2020
DevSecOps survey is a reality check for software teams: 5 key takeaways
Lessons from the front lines
Developers need to cope with more bugs in software, and more diverse types of vulnerabilities. Here are some best practices to consider in the war.
Rob Lemos
Nov 11, 2020
The top 5 vulnerability management best practices for developers
TechBeacon NVD Special Report
Companies need to adjust development, application security, and patching to prioritize the growing number of software vulnerabilities.
Rob Lemos
Nov 10, 2020
More authorities, more CVEs: What it means for app sec teams
TechBeacon NVD Special Report
QA testers are critical to DevOps and other agile software development pipelines—and adding security skills will help you standout from the crowd.
Rob Lemos
Nov 10, 2020
5 reasons QA teams need to pump up application security training
Your software's resilience depends on it
With COVID-19, keeping remote workers secure without affecting productivity has become a major goal. Here's how to make it possible.
Rob Lemos
Oct 20, 2020
Cybersecurity Awareness Month: 5 ways to get your org up to speed
Remote changes everything
Use these best practices from researchers at the USENIX Security conference to lay a solid application security foundation in your organization.
Rob Lemos
Sep 23, 2020
3 application security fundamentals every developer should know
Lay a solid foundation
Show More