The evolution of AppSec: 4 key changes required for a new era

As software development continues to swiftly advance — and grow more complex in terms of dependencies, with faster code releases in the age of continuous integration/continuous development (CI/CD) — application security (AppSec) practices and tooling are struggling to keep up.

Attackers have moved swiftly as well, adjusting targeting these changes in development patterns to leverage the scale of attacks afforded to them by cloud-native development and the interconnected reusability of components in the modern software supply chain. 

Attacks like Sunburst, …

age application application security appsec attackers code continuous continuous integration dependencies development integration key practices releases security software software development targeting terms the age tooling