Software Security

Security is the first and fundamental core principle for software development at Morpho Labs. Software correctness and security are paramount and no measure should compromise this principle. But how do we ensure this? There are several vital aspects for developing secure code, including understanding threats, secure design principles, code quality…

If you’ve been involved in computing or IT for longer than this week, you’ll have come across the terms AppSec, Software Security, DevSecOps, and cybersecurity. Unfortunately, you might often hear or read several being used interchangeably. As always, clarity is key and, in this post, we’ll explain each term, how…

Build better software. If President Joe Biden has his way, that will no longer be a request, a plea, or even an exhortation. It will be a mandate. Or at least a warning with a legal stick behind it. Among the five major “pillars” of the president’s much-anticipated National Cybersecurity…

Software Bill Of Materials (SBOMs) have become extremely popular of late, mainly due to two factors: It’s a key requirement for US government software vendors. Many SCA vendors (and there are a lot of them) have recently introduced SBOM functionality. To anyone paying attention, it seems like there’s an SBOM…

Software supply chain security has been in the news repeatedly since the pandemic, when hackers realized they could gain economies of scale by compromising a single system or process at software providers that have thousands of customers, rather than targeting zero-day exploits at individual companies. …

Software may not be as universal as the air we breathe but it’s getting close. Everybody and every organization depends on it in multiple ways — for work, play, shopping, banking, travel, entertainment, communication, household appliances — the list goes on. And most of that software is what’s called open…