How to implement PaC for a more secure SDLC
Policy as Code is emerging as a key area of focus for AppSec teams in the age of cloud-native development. But implementation can be daunting.
Jaikumar Vijayan
Freelance technology journalist. A former Senior Editor of Computerworld, Jai is a journalist and technology content writing specialist, with 20+ years of award-winning experience in IT trade journalism. He is a correspondent for the Christian Science Monitor and a contributor to Dark Reading, eWEEK, Datamation, IBM Security Intelligence, and Third Certainty. He writes features and covers breaking news stories on information security, data privacy, and big data/business analytics. His recent projects include ERP case studies and an e-book on enterprise mobility management best practices.
Posts from Jaikumar Vijayan
How to implement PaC for a more secure SDLC
AI security tools and hype: Report breaks down key considerations
The Latio AI Security Report highlights how marketing hype is creating confusion — and hurting security outcomes. Here are the top takeaways.
CISO's open letter on third-party software risk is a call to action
JPMorganChase's Pat Opet has raised a red flag. Learn why — and how SaaSBOMs can help your organization get a handle on risk.
Detection as code: How to enhance your real-time threat detection
DaC can bolster the speed, accuracy, and scalability of your threat detection. Here are five essential steps to getting started.
SaaS risk is on the rise: 7 action items for better management
The rapid rise of SaaS apps has spawned new risks. One new hopeful stands out: The SaaSBOM. Here are key steps that help rein them in.
Secrets leaks increase — and expand beyond the codebase
Leaks from GitHub and other repos are up, but collaboration tools such as Slack and Jira are now a major threat — and a serious blind spot.
AI coding tools weaponized: What your AppSec team needs to know
The Rules File Backdoor attack method is pernicious — and one that can be easily exploited with the rise of 'vibe coding' and agentic AI.
EPSS is not foolproof: Shift your AppSec beyond vulnerabilities
The Exploit Prediction Scoring System is useful, but limited. Here's why your application security strategy needs an upgrade.
Go beyond vulnerabilities for your AppSec: Here's why it's essential
Two new reports — and the rise of AI and supply chain attacks — make it clear organizations must look beyond vulnerability mitigation alone. Take action now.