Another Bug Caused by Memory Unsafe String APIs
A recent vulnerability came across my radar earlier this week. The description was vague but said: “There is a stack overflow vulnerability caused by strcpy.” This API first appeared in…
Read More >
CTO Observations from Hacker Summer Camp 2022
BSides LV / Black Hat 25 / DEF CON 30 (aka Hacker Summer Camp 2022) in Las Vegas is now in the rear-view mirror. In addition to news that continues…
Read More >
DeepInsights: Understanding and Observing Risky Application Behavior with Deepfactor
Deepfactor is a developer security platform that enables engineering teams to observe unexpected and risky application behavior during software development, helping developers quickly discover and resolve security vulnerabilities, supply chain…
Read More >
Log4J Vulnerability: The Latest Information Your Software Developers Need To Know About Log4Shell
Happy Holidays! If you’re responsible for application security (AppSec) in your organization—and especially if your applications are written in Java—you received an early Christmas present this past weekend in the…
Read More >
How and Why We Used Kubernetes for Deepfactor 2.0
This week at KubeCon + CloudNativeCon North America 2021, we announced the first major architectural upgrade to our Continuous Application Security Testing (CAST) solution, Deepfactor. This upgrade brought with it…
Read More >
What is the best way to observe application behavior at runtime?
When a developer wants to know what an application they’ve developed is doing, there are a number of different techniques that can be used. But before I dive…
Read More >
Why aren’t developers rushing to use observability?
Are there no observability tools purpose-built for developers? When meeting with our customers’ dev teams, I’m continually amazed that basically nobody I talk with needs much selling on the reasons…
Read More >
What is Observability and Why Should I Care?
Hi everyone, Mike Larkin here. I’m the CTO and co-founder of DeepFactor. At DeepFactor, we’ve developed a new way of observing what your applications are doing while they are…
Read More >