Taylor Armerding – Medium

Taylor Armerding

Taylor Armerding

Cybersecurity awareness should be aimed at software creators as well as users

The need for better cybersecurity is universal. So an awareness month should apply to those who make software, as well as use it.

13h ago

Cybersecurity awareness should be aimed at software creators as well as users

13h ago

Taylor Armerding
in
Nerd For Tech

Report: Build trust (and speed) in your software with DevSecOps

A new report by Black Duck documents the need for improvement in DevSecOps, along with recommendations on how to improve.

Oct 8

Report: Build trust (and speed) in your software with DevSecOps

Oct 8

Taylor Armerding
in
Nerd For Tech

One of software’s oldest vulnerabilities persists, even when fixes are available

There are fixes available for cross-site scripting software vulnerabilities. Why aren’t they being used more often?

Oct 1

One of software’s oldest vulnerabilities persists, even when fixes are available

Oct 1

Taylor Armerding
in
Nerd For Tech

Are you plagued by software testing tool sprawl? Get to know ASPM

Software security testing tool sprawl remains a problem. But ASPM can help to mitigate it.

Sep 23

Are you plagued by software testing tool sprawl? Get to know ASPM

Sep 23

Taylor Armerding
in
Nerd For Tech

SEC cyber incident disclosure rule is a “material” thing

The SEC’s new rule requiring public companies to disclose “material” cyber incidents is well-intended but still untested.

Sep 16

SEC cyber incident disclosure rule is a “material” thing

Sep 16

Taylor Armerding
in
Nerd For Tech

Slack issues a patch. Be sure you apply it

A prompt injection flaw in Slack AI has been patched. But obviously it’s worthless if users don’t apply it.

Sep 9

Slack issues a patch. Be sure you apply it

Sep 9

Taylor Armerding
in
Nerd For Tech

As agriculture gets more connected, it gets more productive — and vulnerable

Farming has always been close to the earth, but now it’s also close to cyber space. That’s both good and bad.

Sep 3

As agriculture gets more connected, it gets more productive — and vulnerable

Sep 3

Taylor Armerding
in
Nerd For Tech

The Cyber Safety Review Board: Good intent, toothless reality

The federal Cyber Safety Review Board, created more than two years ago, is failing at its mission, according to multiple experts.

Aug 26

The Cyber Safety Review Board: Good intent, toothless reality

Aug 26

Taylor Armerding

Predictable ransomware tsunami hits healthcare sector after $22m payout

The $22 million payday for the attackers of Change Healthcare has, not surprisingly, spawned a host of imitators.

Aug 12

Predictable ransomware tsunami hits healthcare sector after $22m payout

Aug 12

Taylor Armerding
in
Nerd For Tech

Could the CrowdStrike disaster have been avoided? Probably

A bad CrowdStrike update is the latest reminder that software can hurt as much as it helps — especally if it’s not rigorously tested.

Aug 5

Could the CrowdStrike disaster have been avoided? Probably

Aug 5

Taylor Armerding

Taylor Armerding

I’m a security advocate at the Synopsys Software Integrity Group. I write mainly about software security, data security and privacy.

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams