Veracode Releases Platform Enhancements as Software Supply Chain Attacks Surge

Veracode , the global leader in application risk management, today announced significant platform innovations introduced through the second half of 2025. Headlining the release is Package Firewall, an industry-leading preventive control for software supply chains, advancing the company’s mission to help organizations run secure software from code to cloud. With supply chain-related third-party breaches doubling year over year— from 15 to 30 percent according to the Verizon 2025 Data Breach Investigations Report — the need to strengthen security across the software ecosystem has never been greater.

“The growing attack surface has created an unprecedented level of complexity for security and development teams,” said Tim Jarrett, Vice President of Product at Veracode. “The latest enhancements to our platform empower organizations to stop third-party risk from ever entering their software code, providing them with a prevention-first approach.”

Package Firewall Enhancement: Preventing Supply Chain Attacks at the Source

Package Firewall , originally launched in June 2025, provides organizations with preventive control over their software supply chains by blocking malicious and risky packages before they enter the development environment. While traditional Software Composition Analysis (SCA) tools identify vulnerabilities in packages that are already in use, Veracode Package Firewall stops threats at the point of ingestion.

The solution now integrates with Azure Artifacts and deploys in seconds with integrations into package managers and repositories, like NPM, PyPI, Maven, Nexus, and Artifactory . It also supports custom policies that enable organizations to enforce security standards while maintaining developer productivity. Organizations can configure policies based on package risk profiles, vulnerability thresholds, and specific security requirements.

Expanded Platform Capabilities and Developer Experience

Veracode continued to expand and enhance its platform capabilities and developer experience throughout the year, with each release improving detection accuracy. Dynamic Application Security Testing (DAST) Essentials gained manual application linking, enabling policy evaluation and consolidated reporting. Software Composition Analysis (SCA) was upgraded with intelligent policies that only fail builds when fixes are available for vulnerable components, reducing developer friction. Static Analysis support was added for cutting-edge frameworks, including .NET Semantic Kernel, Python frameworks like AWS Glue and FastAPI, Java JDK 25 (LTS), and Node.js 22.x.

The platform also saw significant updates to developer integrations for Visual Studio, JetBrains, Azure DevOps, and GitHub, alongside expansions to Veracode Security Labs , with training modules in container security content and the latest OWASP Top 10 .

Enterprise-Grade Authentication for Developer Tools

The most recent platform update saw Veracode introduce the advanced enterprise-grade security required by modern organizations. The company added more thorough platform integration and deeper role-based access control to Veracode Risk Manager (VRM) , and OAuth-based single sign-on (SSO) authentication across its entire Integrated Development Environment (IDE) plugin portfolio, including Visual Studio Code, Visual Studio, Eclipse, and JetBrains platforms. The integration eliminates Application Programming Interface (API) key management and delivers secure, enterprise-grade authentication with centralized access control.

Jarrett closed, “Our mission is to empower organizations to enhance their security posture, bridge critical skills gaps, and accelerate remediation—all within a unified, integrated platform. By listening closely to our customers, we continuously evolved Veracode’s platform in 2025 to meet their needs, enabling them to drive faster, more secure DevSecOps practices.”

Veracode is a global leader in Application Risk Management for the AI era. Powered by trillions of lines of code scans and a proprietary AI-assisted remediation engine, the Veracode platform is trusted by organizations worldwide to build and maintain secure software from code creation to cloud deployment. Thousands of the world’s leading development and security teams use Veracode every second of every day to get accurate, actionable visibility of exploitable risk, achieve real-time vulnerability remediation, and reduce their security debt at scale. Veracode is a multi-award-winning company offering capabilities to secure the entire software development life cycle, including Veracode Fix, Static Analysis, Dynamic Analysis, Software Composition Analysis, Container Security, Application Security Posture Management, Malicious Package Detection, Package Firewall, and Penetration Testing.

View source version on businesswire.com :

Press and Media Contacts Katy Gwilliam Head of Global Communications, Veracode kgwilliam@veracode.com

For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.

Lattice Semiconductor (NASDAQ: LSCC), the low power programmable leader, today announced its exhibition plan for the upcoming FPGA-forum 2026 taking place February 11 – 12, 2026 in Trondheim, Norway. As part of the event, Lattice Corporate Vice President of Software Solutions and Applications Engineering Eleena Ong will deliver a keynote presentation exploring how rapidly maturing AI technologies can turn FPGA platforms into innovation canvases for a much broader range of developers, sparking new application possibilities. Lattice will also deliver a technical presentation and host a demo showcase focused on how its low power FPGA solutions are advancing connectivity and edge AI applications. Who: Lattice Semiconductor What / When (GMT+1): Lattice Demo Showcase (Table #3), Feb 11-12 Keynote Feb. 11, 9:30 a.m. “Unlocking the Wave of FPGA Innovators with Generative and Agentic AI” Technical Presentation Feb. 12, 10 a.m. “Smaller. Cooler. Smarter: Lattice FPGAs’ Path to Uncompromised

Egon Zehnder, the world’s premier leadership advisory firm, today announced that, in accordance with its established governance and three-year election cycle, German Herrera has been elected as the Firm’s Chair by its worldwide partnership. Herrera will assume the role effective March 1, 2026. He will succeed Michael Ensser, who has held the position since 2022, in a planned succession at the conclusion of his regular term. Herrera joined the Firm in 1998 in Bogotá and has helped shape the Firm’s global presence, taking on a broad range of leadership roles, from co-leading the Global Family Business Advisory Practice to serving on the Executive Committee and the Market Council. Most recently, Herrera has guided Egon Zehnder’s U.S. market through a period of impressive growth and transformation, which today includes 15 offices and more than 150 consultants. As the first Latinx person in this role in the industry, he actively forges strategic partnerships and joint ventures. With ex

Below are the preliminary 2025 revenues for the De’ Longhi S.p.A. Group: This press release features multimedia. View the full release here: 12 months, revenues at € 3,801.5 million, growing at 8.7% (+10.4% at constant currency); fourth quarter, revenues at € 1,340.0 million, growing at 5.7% (+8.2% at constant currency). Fabio de' Longhi, CEO of the Group, stated: "The Group achieved solid growth at constant currency of 10.4% in 2025, characterized by consistent results throughout the year. We are particularly pleased with the excellent performance achieved in the fourth quarter, which successfully overcame the challenges posed by the current market environment. The household division consolidated its recent growth momentum during the quarter, with organic growth of 5.2% against a challenging year-over-year comparison. This performance was primarily driven by the structural trend in coffee, amplified by strategic media investmen

Organon (NYSE: OGN), a global healthcare company with a mission to deliver impactful medicines and solutions for a healthier every day, announced today the successful closing of the sale of its JADA® System to Laborie Medical Technologies Corp. Please see our prior announcement for a summary of the transaction terms. Indications for Use The JADA® System is intended to provide control and treatment of abnormal postpartum uterine bleeding or hemorrhage when conservative management is warranted. Contraindications Ongoing intrauterine pregnancy Untreated uterine rupture Unresolved uterine inversion Current cervical cancer Known uterine anomaly Current purulent infection of vagina, cervix, or uterus For C-sections: Cervix <3 cm dilated before use of JADA Warnings Avoid excessive force when inserting JADA into the uterus or trauma to uterine wall may occur, including perforation. The safety and effectiveness of the JADA System in delivery at a gestational age <34 weeks or, if multiples, uter

Laserfiche — the leading SaaS provider of intelligent content management — today announced major enhancements to its AI-powered data extraction tool, Smart Fields. The update introduces automated document classification and tagging, allowing organizations to move from unstructured content to informed decisions in seconds. This press release features multimedia. View the full release here: Using natural language prompts instead of rigid, ruled-based OCR, Smart Fields can now identify document type — such as invoices, taxpayer identification forms, or student transcripts — and automatically apply the correct metadata template using AI. Users can also use Smart Fields to automatically add informational and security tags to files that meet certain criteria, defined using a natural language prompt. Users can capture key details, route documents, and apply the proper metadata tags instantly and at scale. “Success in today’s AI-driven

In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information us.