Shifting Focus to Make DevSecOps Successful - Janet Worthington - ASW #258
11 October 2023 - 1 hour 16 minsWhat if all these recommendations to shift left were more about shifting focus? It's all too easy to become preoccupied with vulns, whether figuring out how to find them earlier in the SDLC or spending time fixing them within specific number of days. Successful DevSecOps approaches can be so much more than just vulns and so much more than just tools. Sure, tools are useful for identifying known vulns in dependencies and new vulns in code, but teams that emphasize people and culture will find it easier to shift their attention to the security of their product and creating secure designs.
In the news, anticipating Curl's upcoming patch for a high severity flaw, the Looney Tunables flaw in Gl...
Series Episodes
North Korea, ransomware, social engineering, AI, Apple, Drugs & Iran - SWN #491
28 mins
4 July Finished
Sony, Scattered Spider, Hikvision, Cybercrime, Iran, BSODs, Cloudflare, Josh Marpet.. - SWN #490
31 mins
1 July Finished
Simple Patterns for Complex Secure Code Reviews - Louis Nyffenegger - ASW #337
38 mins
1 July Finished
The Illusion of Control: Shadow IT, SSO Shortcomings, and the True Path to Security - Dave Lewis - ESW #413
1 hour 52 mins
30 June Finished
