AWS Extends DevSecOps Reach to AI Coding Tools from Anthropic and OpenAI

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

Amazon Web Services (AWS) this week at the Black Hat USA conference revealed it is working with both Anthropic and OpenAI to integrate their respective coding tools with a service it has developed that makes available artificial intelligence (AI) agents to help application developers write more secure code. Launched earlier this year, the AWS Continuum service provides access to AI agents that discover, validate and prioritize vulnerabilities and surface remediation recommendations. Currently available in preview, the integrations connect AWS Continuum with coding tools from Anthropic and OpenAI to create a tighter feedback loop for developers as they write code. At the same time, AWS has also expanded the reach of AWS Security Hub Extended, a unified cloud security and posture management service, to include data shared by Chainguard, a provider of curated open source libraries and container images, and Socket, a provider of a platform that flags malicious software packages, to better detect and block malicious dependencies before they are incorporated into an application. The findings generated by AWS Security Hub are shared via an Open Cybersecurity Schema Framework (OCSF) that is being advanced under the auspices of the Linux Foundation. Finally, AWS is also working with Miggo Security, a provider of an AI runtime security and application detection and response (ADR) platform, to integrate rule sets directly within the Amazon Web Services (AWS) Web Application Firewall (WAF) console. Gee Rittenhouse, vice president for agentic security at AWS, said, in general, AWS is …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen: Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://devops.com/aws-extends-devsecops-reach-to-ai-coding-tools-from-anthropic-and-openai/
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.