DEV Community

#devsecops

Integrating security practices into the DevOps lifecycle.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your AWS role can't tell a human from an agent anymore, part 1: the threat model and the identity problem
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 1: the threat model and the identity problem

#aws #security #ai #devsecops
1
Comments
6 min read
Your AWS role can't tell a human from an agent anymore, part 3: the SCP backstop
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 3: the SCP backstop

#aws #security #ai #devsecops
1
Comments
5 min read
Your AWS role can't tell a human from an agent anymore, part 4: detection — what did the agent actually touch?
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 4: detection — what did the agent actually touch?

#aws #security #ai #devsecops
1
Comments
4 min read
What to fix first when everything is critical
wilson-draugr profile

What to fix first when everything is critical

#security #devsecops #appsec #devops
Comments
6 min read
Your AWS role can't tell a human from an agent anymore, part 5: putting the four layers together
gabrielkoo profile

Your AWS role can't tell a human from an agent anymore, part 5: putting the four layers together

#aws #security #ai #devsecops
1
Comments
4 min read
MITRE ATT&CK для Product Security: как связать pentest, threat modeling, CI/CD и реальные сценарии атак
ivan-piskunov profile

MITRE ATT&CK для Product Security: как связать pentest, threat modeling, CI/CD и реальные сценарии атак

#security #cybersecurity #devsecops #cloud
Comments
10 min read
OpenSSF Scorecard explained: catching risk in packages that don't have a CVE yet
rushabh5000 profile

OpenSSF Scorecard explained: catching risk in packages that don't have a CVE yet

#opensource #security #devsecops #github
Comments
3 min read
AI Autonomy: How to Find the Autonomy Your Agents Already Have
dwayne_mcdaniel profile

AI Autonomy: How to Find the Autonomy Your Agents Already Have

#ai #security #devsecops #secrets
Comments
13 min read
Service Account Credential Rotation: The Blast-Radius Checklist
dwayne_mcdaniel profile

Service Account Credential Rotation: The Blast-Radius Checklist

#security #devops #secrets #devsecops
Comments
9 min read
CVSS, EPSS and KEV: how to actually prioritize dependency vulnerabilities
rushabh5000 profile

CVSS, EPSS and KEV: how to actually prioritize dependency vulnerabilities

#security #devsecops #tutorial #devops
Comments
6 min read
A free, anonymous Snyk alternative for dependency scanning
rushabh5000 profile

A free, anonymous Snyk alternative for dependency scanning

#security #devsecops #tools #devops
Comments
2 min read
AI Created a Leaked Credentials Flood: Here's How We're Draining It
dwayne_mcdaniel profile

AI Created a Leaked Credentials Flood: Here's How We're Draining It

#security #ai #secrets #devsecops
Comments
6 min read
AI Agents vs Traditional Automation: What's Actually Different for Security
dharani2d profile

AI Agents vs Traditional Automation: What's Actually Different for Security

#ai #devsecops #cybersecurity #automation
Comments
16 min read
What is a Software Bill of Materials (SBOM) and why your team needs one
rushabh5000 profile

What is a Software Bill of Materials (SBOM) and why your team needs one

#security #devops #opensource #devsecops
Comments
6 min read
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.