Development Environment Security – Tomislav Pericin, ReversingLabs

The weeks-long compromise of CI/CD vendor CircleCI in December sent shockwaves through development organizations around the globe. It also highlighted a key vulnerability facing development organizations: compromised and rogue developer accounts that abuse access to internal networks and assets, and development pipelines. What steps should organizations take to counter this risk? In this expert analysis, ReversingLabs chief software architect Tomislav Peričin unpacks the CircleCI incident, talks about the growing risk of attacks on developers and development pipelines, including secrets, and talks about steps organizations can take to shore up the security of development environments.