Software and Application Security Blog

[NEW] Six takeaways from the 2025 OSSRA report

By Fred Bals

[NEW] Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

[NEW] AI avalanche: Taming software risk with True Scale Application Security

By Jason Schmitt

[NEW] Six takeaways from the 2025 OSSRA report

By Fred Bals

[NEW] Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

[NEW] AI avalanche: Taming software risk with True Scale Application Security

By Jason Schmitt

[NEW] Six takeaways from the 2025 OSSRA report

By Fred Bals

Software and Application Security Blog

Most recent

The Black Duck Way: Strong culture drives leadership

By Joy Burkholder Meier

Jul 15, 2025 / 3 min read

Tags: Security News & Trends, Awareness

Understanding Section 524B of the FD&C Act

By Mike McGuire

Jul 08, 2025 / 6 min read

Tags: SCA, Threat & Risk Assessment, Awareness, Secure the Software Supply Chain

Scaling application security across borders: Black Duck Polaris Platform empowers Saudi Arabian enterprises with in-region SaaS hosting

By Black Duck Editorial Staff

Jul 06, 2025 / 2 min read

Tags: DAST, Security News & Trends, Awareness, AppSec Best Practices, SAST, Consideration

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

The Importance of a Third-Party Due Diligence Perspective on Code Risk

By Phil Odence

Aug 04, 2025 / 3 min read

Tags: Awareness

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

By Jason Schmitt

Jul 24, 2025 / 4 min read

Tags: SCA, DAST, Build Security into DevOps, Secure the Software Supply Chain, AppSec Best Practices, SAST, Web AppSec, DevSecOps

Key takeaways from the “2024 Software Vulnerability Snapshot” report

By Fred Bals

Jul 21, 2025 / 5 min read

Tags: AppSec Risk Management, Continuous Dynamic (DAST), Black Duck SCA, Coverity SAST

Navigating the EU Cyber Resilience Act

By Corey Hamilton, Fred Bals

Jul 17, 2025 / 7 min read

Tags: Security News & Trends, Threat & Risk Assessment, Awareness, Compliance, AppSec Best Practices

The Black Duck Way: Strong culture drives leadership

By Joy Burkholder Meier

Jul 15, 2025 / 3 min read

Tags: Security News & Trends, Awareness

Understanding Section 524B of the FD&C Act

By Mike McGuire

Jul 08, 2025 / 6 min read

Tags: SCA, Threat & Risk Assessment, Awareness, Secure the Software Supply Chain

Scaling application security across borders: Black Duck Polaris Platform empowers Saudi Arabian enterprises with in-region SaaS hosting

By Black Duck Editorial Staff

Jul 06, 2025 / 2 min read

Tags: DAST, Security News & Trends, Awareness, AppSec Best Practices, SAST, Consideration

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

The Importance of a Third-Party Due Diligence Perspective on Code Risk

By Phil Odence

Aug 04, 2025 / 3 min read

Tags: Awareness

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

By Jason Schmitt

Jul 24, 2025 / 4 min read

Tags: SCA, DAST, Build Security into DevOps, Secure the Software Supply Chain, AppSec Best Practices, SAST, Web AppSec, DevSecOps

Key takeaways from the “2024 Software Vulnerability Snapshot” report

By Fred Bals

Jul 21, 2025 / 5 min read

Tags: AppSec Risk Management, Continuous Dynamic (DAST), Black Duck SCA, Coverity SAST

Navigating the EU Cyber Resilience Act

By Corey Hamilton, Fred Bals

Jul 17, 2025 / 7 min read

Tags: Security News & Trends, Threat & Risk Assessment, Awareness, Compliance, AppSec Best Practices

The Black Duck Way: Strong culture drives leadership

By Joy Burkholder Meier

Jul 15, 2025 / 3 min read

Tags: Security News & Trends, Awareness

Understanding Section 524B of the FD&C Act

By Mike McGuire

Jul 08, 2025 / 6 min read

Tags: SCA, Threat & Risk Assessment, Awareness, Secure the Software Supply Chain

Scaling application security across borders: Black Duck Polaris Platform empowers Saudi Arabian enterprises with in-region SaaS hosting

By Black Duck Editorial Staff

Jul 06, 2025 / 2 min read

Tags: DAST, Security News & Trends, Awareness, AppSec Best Practices, SAST, Consideration

Manage Security Risks

See all manage security risks posts

Solving telecom network security challenges with Defensics

By Andy Pan

Apr 15, 2024 / 3 min read

Tags: Mobile, Manage Security Risks

Top 10 free pen tester tools

By Natalie Lightner

Apr 11, 2024 / 5 min read

Tags: Security News & Trends, Pen Testing, Web AppSec, Manage Security Risks

Team Collaborating on Security Risk Management

Managing risk at scale

By Charlotte Freeman

Apr 08, 2024 / 2 min read

Tags: Manage Security Risks

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security

Q&A: What You Need to Know About Open Source Software Risk in 2025

By Fred Bals

May 22, 2025 / 5 min read

Tags: Threat & Risk Assessment, Awareness, AppSec Best Practices, Manage Security Risks

BSIMM15: New focus on securing AI and the software supply chain

By Black Duck Editorial Staff

Jan 14, 2025 / 5 min read

Tags: Program Strategy & Planning, Awareness, Manage Security Risks

A pragmatic guide to getting started with ASPM

By Rod Musser

Jul 09, 2024 / 3 min read

Tags: Manage Security Risks, Orchestration & Correlation

SSDF BSIMM mapping updated for BSIMM14

By Mike Lyman

Jun 18, 2024 / 8 min read

Tags: Program Strategy & Planning, Compliance, Manage Security Risks

Solving telecom network security challenges with Defensics

By Andy Pan

Apr 15, 2024 / 3 min read

Tags: Mobile, Manage Security Risks

Top 10 free pen tester tools

By Natalie Lightner

Apr 11, 2024 / 5 min read

Tags: Security News & Trends, Pen Testing, Web AppSec, Manage Security Risks

Managing risk at scale

By Charlotte Freeman

Apr 08, 2024 / 2 min read

Tags: Manage Security Risks

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security

Q&A: What You Need to Know About Open Source Software Risk in 2025

By Fred Bals

May 22, 2025 / 5 min read

Tags: Threat & Risk Assessment, Awareness, AppSec Best Practices, Manage Security Risks

BSIMM15: New focus on securing AI and the software supply chain

By Black Duck Editorial Staff

Jan 14, 2025 / 5 min read

Tags: Program Strategy & Planning, Awareness, Manage Security Risks

A pragmatic guide to getting started with ASPM

By Rod Musser

Jul 09, 2024 / 3 min read

Tags: Manage Security Risks, Orchestration & Correlation

SSDF BSIMM mapping updated for BSIMM14

By Mike Lyman

Jun 18, 2024 / 8 min read

Tags: Program Strategy & Planning, Compliance, Manage Security Risks

Solving telecom network security challenges with Defensics

By Andy Pan

Apr 15, 2024 / 3 min read

Tags: Mobile, Manage Security Risks

Top 10 free pen tester tools

By Natalie Lightner

Apr 11, 2024 / 5 min read

Tags: Security News & Trends, Pen Testing, Web AppSec, Manage Security Risks

Managing risk at scale

By Charlotte Freeman

Apr 08, 2024 / 2 min read

Tags: Manage Security Risks

See all posts

Build Security into DevOps

See all build security into DevOps posts

Overcome AST noise to find and fix software vulnerabilities

By Steven Zimmerman

Jan 06, 2025 / 6 min read

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

AI widens gap between security and dev thumbnail

Artificial intelligence widens the gap between security and development

By Steven Zimmerman

Dec 01, 2024 / 7 min read

Tags: Artificial Intelligence, Build Security into DevOps, DevSecOps

Faster, better, stronger application security for developers in the IDE

By Steven Zimmerman

Oct 10, 2024 / 6 min read

Tags: SCA, Build Security into DevOps, SAST

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

By Jason Schmitt

Jul 24, 2025 / 4 min read

Tags: SCA, DAST, Build Security into DevOps, Secure the Software Supply Chain, AppSec Best Practices, SAST, Web AppSec, DevSecOps

Three steps to ensuring the reliability and security of your C++ projects

By Corey Hamilton

Jun 03, 2025 / 3 min read

Tags: SCA, Build Security into DevOps, SAST, DevSecOps

How to build reliability into developer workflows without slowing down

By Corey Hamilton

May 19, 2025 / 3 min read

Tags: Build Security into DevOps

How to secure AI-generated code with DevSecOps best practices

By Steven Zimmerman

May 08, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, DevSecOps

Security automation and integration can smooth AppSec friction

By Steven Zimmerman

Jan 23, 2025 / 6 min read

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Overcome AST noise to find and fix software vulnerabilities

By Steven Zimmerman

Jan 06, 2025 / 6 min read

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Artificial intelligence widens the gap between security and development

By Steven Zimmerman

Dec 01, 2024 / 7 min read

Tags: Artificial Intelligence, Build Security into DevOps, DevSecOps

Faster, better, stronger application security for developers in the IDE

By Steven Zimmerman

Oct 10, 2024 / 6 min read

Tags: SCA, Build Security into DevOps, SAST

Black Duck Assist: AI code security assistance in your IDE

By Patrick Carey

Aug 05, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, Threat & Risk Assessment, Awareness, Manage Security Risks

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

By Jason Schmitt

Jul 24, 2025 / 4 min read

Tags: SCA, DAST, Build Security into DevOps, Secure the Software Supply Chain, AppSec Best Practices, SAST, Web AppSec, DevSecOps

Three steps to ensuring the reliability and security of your C++ projects

By Corey Hamilton

Jun 03, 2025 / 3 min read

Tags: SCA, Build Security into DevOps, SAST, DevSecOps

How to build reliability into developer workflows without slowing down

By Corey Hamilton

May 19, 2025 / 3 min read

Tags: Build Security into DevOps

How to secure AI-generated code with DevSecOps best practices

By Steven Zimmerman

May 08, 2025 / 3 min read

Tags: Artificial Intelligence, Build Security into DevOps, DevSecOps

Security automation and integration can smooth AppSec friction

By Steven Zimmerman

Jan 23, 2025 / 6 min read

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Overcome AST noise to find and fix software vulnerabilities

By Steven Zimmerman

Jan 06, 2025 / 6 min read

Tags: Agile, CI/CD, Build Security into DevOps, DevSecOps

Artificial intelligence widens the gap between security and development

By Steven Zimmerman

Dec 01, 2024 / 7 min read

Tags: Artificial Intelligence, Build Security into DevOps, DevSecOps

Faster, better, stronger application security for developers in the IDE

By Steven Zimmerman

Oct 10, 2024 / 6 min read

Tags: SCA, Build Security into DevOps, SAST

See all posts

Secure the Software Supply Chain

See all secure the software supply chain posts

Beyond detection: Understanding vulnerability reachability in SCA

By Mike McGuire

Jun 30, 2025 / 6 min read

Tags: SCA, Awareness, Secure the Software Supply Chain

The 2025 OSSRA report uncovers answers to common open source questions

By Fred Bals

Mar 12, 2025 / 4 min read

Tags: SCA, Secure the Software Supply Chain

Top open source licenses and legal risk for developers

By Fred Bals

Mar 05, 2025 / 8 min read

Tags: SCA, Secure the Software Supply Chain, OSS License Compliance

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security

Unlocking the full potential of application security: Key findings from the Black Duck customer value study

By Jason Schmitt

Jul 24, 2025 / 4 min read

Tags: SCA, DAST, Build Security into DevOps, Secure the Software Supply Chain, AppSec Best Practices, SAST, Web AppSec, DevSecOps

Understanding Section 524B of the FD&C Act

By Mike McGuire

Jul 08, 2025 / 6 min read

Tags: SCA, Threat & Risk Assessment, Awareness, Secure the Software Supply Chain

Beyond detection: Understanding vulnerability reachability in SCA

By Mike McGuire

Jun 30, 2025 / 6 min read

Tags: SCA, Awareness, Secure the Software Supply Chain

The 2025 OSSRA report uncovers answers to common open source questions

By Fred Bals

Mar 12, 2025 / 4 min read

Tags: SCA, Secure the Software Supply Chain

Top open source licenses and legal risk for developers

By Fred Bals

Mar 05, 2025 / 8 min read

Tags: SCA, Secure the Software Supply Chain, OSS License Compliance

Faster, Smarter Vulnerability Alerts: AI in Black Duck Security Advisories

By Mike McGuire

Jul 31, 2025 / 5 min read

Tags: Artificial Intelligence, Awareness, Secure the Software Supply Chain, AppSec Best Practices, Cloud Security, Manage Security Risks, Container Security