A new report compiled by Endor’s Station 9 research team – and reviewed CISOs at leading tech companies – outlines risks introduced through open-source components throughout the software development

With increasing demand from the DevOps community for partner integrations, CircleCI announced a new integration with SaaS-based data analytics platform Datadog.

Tom Gillis discussed why he joined Cisco and his plans to differentiate Cisco’s security portfolio from other major security vendors.

Enterprises save resources when "the tedious monitoring and management of vulnerabilities is done automatically," Swimlane's Cody Cornell said.

Remote work causes "an increased attack surface for cybercriminals [and] increasingly costly data breaches,” Proxyrack Fraud Analyst Ariana Bago said.

“Zero trust has quickly moved from a security concept to an operational imperative for organizations,” the vendor noted.

“Cybercriminals have not slowed down too much in their use of Log4Shell exploits in attacks," Adrian Korn said.

"When you have these broad zero-day events that impact many industries ... that's where things like SBOM come into play," Jennifer Morovitz said.

"Depending on which level of the tech stack we're talking about, we're looking at different control measures," Deere's Julian Sanchez said.

“The horizon when we enter the era of what we call cryptographically-relevant quantum machines is getting closer all the time," IBM's Michael Osborne said.

Uber's internal systems were breached; a new federal cybersecurity grant program is announced; and D2iQ claims to be "Switzerland" of Kubernetes.

Many of the security tools and best practices that worked in the data center "cannot protect your cloud environment," Snyk's Josh Stella said.

"The data family left the four walls, and there's no moat around there," says Skyhigh Security Chief Product Officer Anand Ramanathan. In this Q&A CEO Gee Rittenhouse and Ramanathan

"You cannot judge a vendor because they have a vulnerability. Because as much as you do everything right to be healthy, you may catch a flu,” Dell's Eric Baize

“It's not about one network function anymore. ... On a 5G network we’re thinking 5G use case security," Deloitte's Shehadi Dayekh explained

"Networking without security doesn't make any sense, and those two stacks are actually getting much more converged now than ever before,” Cisco EVP Jeetu Patel said.

“If you look at ransomware, it's a business, it's financially motivated,” CSW CEO Aaron Sandeen said.

The intersection of software and security "is an onion," Cisco's Head of Open Source Stephen Augustus said.

Visa has spent more than $9 billion on boosting cybersecurity and reducing fraud over the past five years.

SSE isn't well suited to protecting IoT devices, Aruba's David Hughes said. And "for every user today, there are five IoT devices."

More than 60% of surveyed IT professionals said alert fatigue has contributed to turnover or internal friction, Orca Security’s report found.

“What's missing and what we've added is more of the supply chain aspect and tying that all together,” Palo Alto Networks' Taylor Smith said.

“All of these new APIs introduce a lot of security risks, and that’s why a lot of CISOs are now paying attention,” Imperva CTO Peter Klimek said.

“We aim to offer customers a complete journey from code to cloud,” Snyk founder Guy Podjarny said.