Checkmarx
The world runs on code. We secure it.
- Website
- checkmarx.com · all feeds from this site
- Feed URL
https://www.checkmarx.com/feed/
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
What the PHP Patch Scramble Reveals About Remediation
When Nick Woodhead spoke with Business Insider on October 23, he had been awake for nearly 48 hours responding to critical PHP vulnerabilities. The CTO of Rothco and Compubox was helping his teams update systems, review logs for signs of compromise, and protect older…
-
Manual triage is where backlogs are born. Checkmarx Triage & Remediation Assist is how they’re cleared.
Where do application security programs lose time and create a backlog? Not in the detection itself, but in the gap between detection and an approved fix. Every finding that reaches your team opens four questions before anyone can act on it: Detection only surfaced the problem.…
-
Severity Is Not a Strategy: What CISA BOD 26-04 Means for the Future of Federal Software Security
CISA’s latest directive shifts the focus from severity or number of findings to the actual risk context when deciding how to remediate. For federal cybersecurity teams, that shift is becoming increasingly important as vulnerabilities are discovered faster than teams can fix…
-
The Regulators Already Assume You Have an AI Inventory. Do You?
The regulators are done with “Trust as policy”. That chain used to be an internal maturity problem, something a security program could work on over time: A developer trusts AI-generated code because it compiles. A reviewer trusts an AI-generated summary because it reads…
-
There Is No Patch Tuesday on the Blockchain: Why Solidity Developers Need Fusion-Grade AppSec Before They Deploy
For most software teams, security is a race against a clock. The median time from vulnerability disclosure to weaponization has collapsed from 840 days to 1.6 days, and 80% of exploitations now occur on or before the day of disclosure. That’s bad. But if you write Solidity, you…
-
The Next Model Won’t Fix This: Three AppSec Imperatives From Black Hat USA 2026
Black Hat USA 2026 didn’t introduce the AI security problem, but made it clear how fast that problem is becoming operational. An independent study initiated and funded by Checkmarx helps explain why. On real-world repository tasks, frontier models produced working code 83% to…
-
What Is Checkmarx Fusion?
Now available in Early Access for SAST within Checkmarx One, Checkmarx Fusion adds a new detection layer that advances vulnerability-finding accuracy beyond what rules-based scanning or an AI model can achieve alone.