Security Boulevard reports that Orca Securitys cloud-native application protection platform has been upgraded with a new ability to trace cloud vulnerabilitiesin production environments back to its original code and its author.
The Orca Security platform can now, for example, respond to the detection of a vulnerability in a running container by identifying the source code repository, the Dockerfile, as well as the owner who added the vulnerable package, said Orca Securitys Chief Innovations Officer Avi Shua.
The addition of Cloud to Dev capabilities marks another step in bridging the gap between application developers and cybersecurity professionals, according to Shua. Until now, developers have had no tool at their disposal that lets them glean the context from a discovered cybersecurity flaw and to develop a remediation for it, Shua said.
Orca Security estimates that this capability would cut the amount of effort expended by development teams in addressing cloud security issues by around 80%.
Sysdig has unveiled a new cloud-native application protection platform featuring end-to-end cloud detection and response, which it touts to be the first of its kind, reports SecurityWeek.
Data in Honda's power equipment e-commerce site exposed by API vulnerabilities BleepingComputer reports that Honda had its e-commerce platform for power equipment impacted by password reset API security vulnerabilities, which could be leveraged to access customer information and other documents.
Google Cloud announced June 8 that cryptomining-attack prevention is built into its risk-management solution the cloud service provider is offering customers of its Security Command Center Premium service.