close search bar

Sorry, not available in this language yet

close language selection

Most recent

Synopsys named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing

Synopsys named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing

Synopsys Editorial Team
By Synopsys Editorial Team

Dec 07, 2023 / 2 min read

Tags: Software Integrity, Security News & Research
BSIMM14: Trends and recommendations to help improve your software security program

BSIMM14: Trends and recommendations to help improve your software security program

Charlotte Freeman
By Charlotte Freeman

Dec 05, 2023 / 4 min read

Tags: Software Integrity, Program Strategy & Planning, Manage Security Risks
Shifting everywhere: The importance of continuous testing in the software development life cycle

Shifting everywhere: The importance of continuous testing in the software development life cycle

Fred Bals
By Fred Bals

Dec 04, 2023 / 3 min read

Tags: Software Integrity, DevSecOps
Consolidate insight to enhance risk management

Consolidate insight to enhance risk management

Shandra Gemmiti
By Shandra Gemmiti

Nov 27, 2023 / 4 min read

Tags: Software Integrity, Build Secure Software, Manage Security Risks
Audited vs. automated: What your automated open source tool isn't seeing

Audited vs. automated: What your automated open source tool isn't seeing

Susan Miller
Don Mulrenan
Rich Kosinski
By Susan Miller, Don Mulrenan, Rich Kosinski

Nov 21, 2023 / 5 min read

Tags: SCA, M&A, Software Integrity, Build Secure Software, OSS License Compliance
Building Security in Podcast: Cloud, AI, and quantum computing

Building Security in Podcast: Cloud, AI, and quantum computing

Synopsys Editorial Team
By Synopsys Editorial Team

Nov 20, 2023 / 1 min read

Tags: Software Integrity, DevSecOps, Cloud Security
Why cross-site scripting still matters

Why cross-site scripting still matters

Charlotte Freeman
By Charlotte Freeman

Nov 14, 2023 / 4 min read

Tags: Software Integrity, Program Strategy & Planning, Build Secure Software, AppSec Best Practices, Web AppSec, Manage Security Risks
Software Vulnerability Snapshot Report Findings

Software Vulnerability Snapshot Report Findings

Fred Bals
By Fred Bals

Nov 14, 2023 / 3 min read

Tags: DAST, Software Integrity, Security News & Research, Pen Testing, Web AppSec
Critical aspects of a secure software supply chain

Critical aspects of a secure software supply chain

Mike McGuire
By Mike McGuire

Nov 07, 2023 / 7 min read

Tags: Software Integrity, Software Supply Chain

Manage Security Risks

See all manage security risks posts

BSIMM14: Trends and recommendations to help improve your software security program

BSIMM14: Trends and recommendations to help improve your software security program

Charlotte Freeman
By Charlotte Freeman

Dec 05, 2023 / 4 min read

Tags: Software Integrity, Program Strategy & Planning, Manage Security Risks
Consolidate insight to enhance risk management

Consolidate insight to enhance risk management

Shandra Gemmiti
By Shandra Gemmiti

Nov 27, 2023 / 4 min read

Tags: Software Integrity, Build Secure Software, Manage Security Risks
Why cross-site scripting still matters

Why cross-site scripting still matters

Charlotte Freeman
By Charlotte Freeman

Nov 14, 2023 / 4 min read

Tags: Software Integrity, Program Strategy & Planning, Build Secure Software, AppSec Best Practices, Web AppSec, Manage Security Risks
Secure cloud-native apps and APIs at the speed your business demands

Secure cloud-native apps and APIs at the speed your business demands

Kimm Yeo
By Kimm Yeo

Oct 30, 2023 / 6 min read

Tags: Software Integrity, Build Secure Software, IAST, Cloud Security, Manage Security Risks
Bridging the gap between pentesting and automated scanners with business logic assessments

Bridging the gap between pentesting and automated scanners with business logic assessments

Vishrut Iyengar
By Vishrut Iyengar

Oct 23, 2023 / 7 min read

Tags: Software Integrity, Manage Security Risks
The hidden business risks of technical debt in mergers and acquisitions

The hidden business risks of technical debt in mergers and acquisitions

Synopsys Editorial Team
By Synopsys Editorial Team

Oct 13, 2023 / 3 min read

Tags: M&A, Software Integrity, Manage Security Risks, OSS License Compliance
How to respond to the curl and libcurl vulnerabilities

How to respond to the curl and libcurl vulnerabilities

Matthew Hogg
By Matthew Hogg

Oct 11, 2023 / 4 min read

Tags: Software Integrity, Security News & Research, CyRC, Manage Security Risks
Preparing for critical libcurl and curl vulnerabilities (CVE-2023-38545)

Preparing for critical libcurl and curl vulnerabilities (CVE-2023-38545)

Mike McGuire
By Mike McGuire

Oct 09, 2023 / 2 min read

Tags: Software Integrity, Security News & Research, Manage Security Risks
CyRC Vulnerability Analysis: XML external entity injection vulnerability in OpenNMS

CyRC Vulnerability Analysis: XML external entity injection vulnerability in OpenNMS

Moshe Apelbaum
By Moshe Apelbaum

Oct 04, 2023 / 8 min read

Tags: Software Integrity, CyRC, Manage Security Risks

See all posts

Build Secure Software

See all build secure software posts

Consolidate insight to enhance risk management

Consolidate insight to enhance risk management

Shandra Gemmiti
By Shandra Gemmiti

Nov 27, 2023 / 4 min read

Tags: Software Integrity, Build Secure Software, Manage Security Risks
Audited vs. automated: What your automated open source tool isn't seeing

Audited vs. automated: What your automated open source tool isn't seeing

Susan Miller
Don Mulrenan
Rich Kosinski
By Susan Miller, Don Mulrenan, Rich Kosinski

Nov 21, 2023 / 5 min read

Tags: SCA, M&A, Software Integrity, Build Secure Software, OSS License Compliance
Why cross-site scripting still matters

Why cross-site scripting still matters

Charlotte Freeman
By Charlotte Freeman

Nov 14, 2023 / 4 min read

Tags: Software Integrity, Program Strategy & Planning, Build Secure Software, AppSec Best Practices, Web AppSec, Manage Security Risks
Secure cloud-native apps and APIs at the speed your business demands

Secure cloud-native apps and APIs at the speed your business demands

Kimm Yeo
By Kimm Yeo

Oct 30, 2023 / 6 min read

Tags: Software Integrity, Build Secure Software, IAST, Cloud Security, Manage Security Risks
Automate security: DevOps integrations for risk detection and remediation

Automate security: DevOps integrations for risk detection and remediation

Charlotte Freeman
By Charlotte Freeman

Sep 19, 2023 / 4 min read

Tags: Software Integrity, Build Secure Software, DevSecOps
National Coding Week: Closing the skills gap with secure code training

National Coding Week: Closing the skills gap with secure code training

Taylor Armerding
By Taylor Armerding

Sep 18, 2023 / 5 min read

Tags: Software Integrity, Build Secure Software, Training, DevSecOps
How to safeguard your AI ecosystem: The imperative of AI/ML security assessments

How to safeguard your AI ecosystem: The imperative of AI/ML security assessments

John Waller
By John Waller

Sep 07, 2023 / 5 min read

Tags: Software Integrity, Build Secure Software, DevSecOps
What capabilities are critical to the success of your AppSec program?

What capabilities are critical to the success of your AppSec program?

Patrick Carey
By Patrick Carey

Aug 31, 2023 / 5 min read

Tags: Software Integrity, Security News & Research, Build Secure Software, Software Supply Chain, Manage Security Risks
How to make the future IoT more secure

How to make the future IoT more secure

Taylor Armerding
By Taylor Armerding

Aug 24, 2023 / 7 min read

Tags: Software Integrity, Build Secure Software, Pen Testing, Training, Internet of Things

See all posts

Open source and software supply chain risks

See all software supply chain posts

Critical aspects of a secure software supply chain

Critical aspects of a secure software supply chain

Mike McGuire
By Mike McGuire

Nov 07, 2023 / 7 min read

Tags: Software Integrity, Software Supply Chain
SBOMs and SPDX: Now and in the future

SBOMs and SPDX: Now and in the future

Gary O’Neall
By Gary O’Neall

Oct 27, 2023 / 3 min read

Tags: M&A, Software Integrity, Software Supply Chain, OSS License Compliance
What capabilities are critical to the success of your AppSec program?

What capabilities are critical to the success of your AppSec program?

Patrick Carey
By Patrick Carey

Aug 31, 2023 / 5 min read

Tags: Software Integrity, Security News & Research, Build Secure Software, Software Supply Chain, Manage Security Risks
Synopsys named a Leader in the 2023 Gartner® Magic Quadrant™ for Application Security Testing for the seventh year

Synopsys named a Leader in the 2023 Gartner® Magic Quadrant™ for Application Security Testing for the seventh year

Jason Schmitt
By Jason Schmitt

May 22, 2023 / 3 min read

Tags: Software Integrity, Security News & Research, Build Secure Software, Software Supply Chain, Manage Security Risks
Eliminate malicious code in your software supply chain

Eliminate malicious code in your software supply chain

Synopsys Editorial Team
By Synopsys Editorial Team

May 17, 2023 / 2 min read

Tags: Software Integrity, Software Supply Chain
2023 OSSRA deep dive: jQuery and open source security

2023 OSSRA deep dive: jQuery and open source security

Fred Bals
By Fred Bals

May 10, 2023 / 4 min read

Tags: SCA, Software Integrity, Software Supply Chain, OSS License Compliance

See all posts

Security news and research

See all security news and research posts

Synopsys named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing

Synopsys named as a Customers’ Choice in the 2023 Gartner® Peer Insights™ Voice of the Customer for Application Security Testing

Synopsys Editorial Team
By Synopsys Editorial Team

Dec 07, 2023 / 2 min read

Tags: Software Integrity, Security News & Research
Software Vulnerability Snapshot Report Findings

Software Vulnerability Snapshot Report Findings

Fred Bals
By Fred Bals

Nov 14, 2023 / 3 min read

Tags: DAST, Software Integrity, Security News & Research, Pen Testing, Web AppSec
DevSecOps Report: ASPM and its impact on software security

DevSecOps Report: ASPM and its impact on software security

Fred Bals
By Fred Bals

Oct 18, 2023 / 2 min read

Tags: Software Integrity, Security News & Research, DevSecOps
How to respond to the curl and libcurl vulnerabilities

How to respond to the curl and libcurl vulnerabilities

Matthew Hogg
By Matthew Hogg

Oct 11, 2023 / 4 min read

Tags: Software Integrity, Security News & Research, CyRC, Manage Security Risks
Deep Dive: 2023 Global State of DevSecOps Report

Deep Dive: 2023 Global State of DevSecOps Report

Fred Bals
By Fred Bals

Oct 10, 2023 / 2 min read

Tags: Software Integrity, Security News & Research, DevSecOps
Preparing for critical libcurl and curl vulnerabilities (CVE-2023-38545)

Preparing for critical libcurl and curl vulnerabilities (CVE-2023-38545)

Mike McGuire
By Mike McGuire

Oct 09, 2023 / 2 min read

Tags: Software Integrity, Security News & Research, Manage Security Risks
Defensics extends fuzzing capabilities for IoT markets

Defensics extends fuzzing capabilities for IoT markets

Synopsys Editorial Team
By Synopsys Editorial Team

Sep 21, 2023 / 1 min read

Tags: Software Integrity, Fuzzing, Security News & Research
Forrester recognizes Synopsys as a Leader in static application security testing

Forrester recognizes Synopsys as a Leader in static application security testing

Corey Hamilton
By Corey Hamilton

Sep 19, 2023 / 3 min read

Tags: Software Integrity, Security News & Research, SAST
The SANS report: The dynamics of DevSecOps

The SANS report: The dynamics of DevSecOps

Synopsys Editorial Team
By Synopsys Editorial Team

Aug 31, 2023 / 3 min read

Tags: Software Integrity, Security News & Research, DevSecOps

See all blog posts

Explore Topics

Agile, CI/CD
AppSec Best Practices
Automotive
Build Secure Software
Cloud Security
Compliance
Container Security
CyRC
DevSecOps
DAST
Financial Services
Fuzzing
Healthcare
IAST
Internet of Things
M&A
Manage Security Risks
Medical Devices
Mobile
Orchestration & Correlation
OSS License Compliance
Pen Testing
Program Strategy & Planning
Public Sector
SAST
SCA
Software Supply Chain
Security News & Research
Threat Modeling
Threat & Risk Assessment
Training
Web Application Security