CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Shift Left Security Strategy Fails to Deliver Expected Benefits

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The 'shift left' security strategy, which aims to integrate security earlier in the software development lifecycle (SDLC), has failed to deliver its promised benefits. Developers are overwhelmed with cognitive load, and businesses prioritize speed over security, leading to increased risks. A study by Qualys found that 7.3% of container images from public repositories were malicious, with 70% containing cryptomining software. The strategy has shifted the burden onto developers without adequate support, resulting in security being bypassed or ignored. To address these issues, experts recommend a 'shift down' approach, where security is embedded into the infrastructure layer, managed by specialized teams. This approach automates security checks and fixes, reducing the cognitive load on developers and making secure deployment the path of least resistance.

Timeline

  1. 20.02.2026 16:45 1 articles · 7h ago

    Qualys Study Reveals High Percentage of Malicious Container Images

    Qualys Threat Research Unit (TRU) conducted an analysis of over 34,000 container images from public repositories, finding that 7.3% were malicious. Of the malicious images, 70% contained cryptomining software, and 42% contained more than five secrets, such as AWS access keys and database credentials. The study highlights the risks associated with using public container images and the need for better security measures.

    Show sources
    Open in new tab

Information Snippets