Security news aggregator

Latest coverage for SDLC

SDLC integrates security into software planning, coding, testing, and maintenance to reduce defects, vulnerabilities, and risks before release.

7 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Software Development Life Cycle (SDLC) is the structured process for planning, designing, building, testing, deploying, and maintaining software. It gives teams a way to define requirements and manage changes throughout a product’s life. Secure SDLC adds security requirements and review activities to those stages rather than treating security as a final test.

For security practitioners, relevant activities include threat modeling during design, secure coding and peer review during development, and testing for authorization flaws, injection vulnerabilities, and unsafe dependencies before release. Build systems and deployment pipelines also need controls against tampered artifacts, exposed credentials, and insecure configuration. After deployment, vulnerability management includes monitoring dependencies, triaging findings, patching releases, and retiring unsupported components. These practices reduce the chance that defects become exploitable, while preserving evidence of security decisions for audits and investigations.

Volume over time

Weekly headline count for the current query.

Showing 7 most recent headlines
Bank Info Security 1 year, 8 months ago

Snyk Acquires Probely to Strengthen API Security for AI Apps

Snyk Boosts API Security with Enhanced Dynamic App Security Testing CapabilitiesBy buying DAST provider Probely, Snyk bolsters its platform with advanced API security testing for early SDLC stages. This acquisition aims to help developers identify and reduce vulnerabilities in AI-driven and API-heavy applications. Full integration into Snyk's platform is slated for early 2025.

More from Bank Info Security 13 Nov 2024, 2:30 a.m. Acquisition API Artificial Intelligence Enhancement SDLC Vulnerability

Application security testing is a critical component of modern software development, ensuring that applications are robust and resilient against malicious attacks. As cyber threats continue to evolve in complexity and frequency, the need to integrate comprehensive security measures throughout the SDLC has never been more essential. Traditional pentesting provides a crucial snapshot of an

More from The Hacker News 25 Jul 2024, 11:20 p.m. Application Security SDLC
The Hacker News 4 years, 1 month ago

Be Proactive! Shift Security Validation Left

"Shifting (security)" left approach in Software Development Life Cycle (SDLC) means starting security earlier in the process. As organizations realized that software never comes out perfectly and are riddled with many exploitable holes, bugs, and business logic vulnerabilities that require going back to fix and patch, they understood that building secure software requires incorporating and

More from The Hacker News 7 Jun 2022, 12:39 a.m. Patch SDLC Vulnerability