Tags → #software development

Vulnerabilities
Google Enhances Memory Safety with New Coding Practices
Nov 16, 2024 Google is implementing a comprehensive strategy to enhance memory safety by addressing spatial memory safety vulnerabilities through the adoption of Safe Coding practices and the introduction of hardened libc++.
Vulnerabilities
Vulnerability Discovered in Filecoin Network Clients
Nov 13, 2024 A vulnerability identified in the Lotus and Venus clients of the Filecoin network allowed for remote node crashes, prompting a switch to unsigned integers for improved security.
Tools
Importance of User-Friendly Account Setup and Login Experiences
Nov 12, 2024 The article discusses the growing importance of user-friendly account setup and login experiences in digital services, highlighting the need for modern identity and access management practices that balance security with user experience.
Industry
Challenges and Strategies in DevSecOps Implementation
Nov 10, 2024 The integration of DevSecOps is increasingly seen as essential in software development, aiming to merge development, security, and operations while addressing challenges such as conflicting priorities and a lack of resources.
Vulnerabilities
AI Agent Identifies Vulnerability in SQLite Database Engine
Nov 3, 2024 The Big Sleep team, a collaboration between Google Project Zero and Google DeepMind, has discovered a real-world vulnerability in the SQLite database engine, marking the first instance of an AI agent identifying an exploitable memory-safety issue in widely used software.
Policy
CISA Seeks Public Input on Product Security Guidance
Nov 3, 2024 The Cybersecurity and Infrastructure Security Agency (CISA) is inviting public feedback on its upcoming Product Security Bad Practices guidance, which aims to enhance software security in critical infrastructure.