Army Not Ready for February SBOM Deadline

Army Not Ready for February SBOM Deadline

Interview with government IT “Reformer” John Weiler By Deb Radcliff, editor of TalkSecure, sponsored by CodeSecure and syndicated at Security Boulevard & YouTube Starting in February 2025, the U.S. Army will require software bills of ...
Secure by Demand with Dick Brooks

Empowering Software Buyers Through Secure-by-Demand Guidelines

| | cisa, sdlc, TalkSecure Blog
Interview by Deb Radcliff, editor of TalkSecure, hosted by CodeSecure and syndicated at YouTube, Bright Talk, and Security Boulevard Recently, the Cybersecurity and Infrastructure Security Agency (CISA) released its Secure by Demand ...
EU CRA: Good Intentions, Impossible Requirements

EU CRA: Good Intentions, Impossible Requirements

As the European Union’s Cyber Resilience Act (EU CRA) prepares to publish a final draft, product manufacturers with any “digital” component must comply three years after final publication. If passed, the EU ...

Gen-AI Won’t Replace Humans – or SAST – In the SDLC

Interview with MITRE’s Tracey Bannon by industry analyst Deb Radcliff, editor of TalkSecure, hosted by CodeSecure and syndicated at Security Boulevard & YouTube Click HERE to listen. Whether people realize it or not, AI in ...

What Lurks in Your SDK?!?

| | TalkSecure Blog
Teams building innovative new products do so on the shoulders of giants. Let me explain. When you build on top of the latest boards from NXP, ST Micro, Texas Instruments or others, ...

Threat Modeling for Embedded Systems

| | TalkSecure Blog
By Deb Radcliff, DevSecOps analyst and editor of CodeSecure’s TalkSecure educational content (syndicated at Security Boulevard & YouTube) In this interview, Jay Warne describes his work on what he calls ‘far-side of research’ into low-level functions of embedded ...
CodeSonar with GitLab DUO to Explain Vulnerabilities

Can AI Help Fix Security Vulnerabilities?

| | TalkSecure Blog
We get a lot of questions from our customers around the topic of artificial intelligence in combination with SAST (Static Application Security Testing). Everybody is looking for the next level of efficiency ...

SBOMs for Medical Devices

| | TalkSecure Blog
By Deb Radcliff, DevSecOps analyst and editor of CodeSecure’s TalkSecure educational content (syndicated at Security Boulevard & YouTube) The U.S. Food and Drug Administration recently updated its requirements to certify the cyber-safety of connected medical devices. Product companies ...
SBOMs Critical to Software Supply Chain Security

SBOMs Critical to Software Supply Chain Security

By Deb Radcliff, DevSecOps analyst and editor of CodeSecure’s TalkSecure educational content (syndicated at Security Boulevard & YouTube)LAS VEGAS – One day before the Black Hat Briefings started in Vegas last week, a group of experts met at ...

I Have An SBOM, Now What ?!?

| | TalkSecure Blog
A Software Bill of Material (SBOM) lists the software components that are used in a piece of software. It typically also provides an overview of known vulnerabilities (N-day vulnerabilities) as well as ...