DevSecOps
ServiceNow Adds Observability Platform to SaaS Portfolio
At its Knowledge 2023 conference, ServiceNow launched an observability service that runs on its software-as-a-service (SaaS) platform. Based on the observability platform the company gained with its acquisition of Lightstep, the ServiceNow ...
DevOps Security: Your Complete Checklist
Yoni Farin | | application development, checklist, devops, devsecops, secure coding, security, Software Supply ChainIn a fast-paced environment like DevOps, your security strategy needs to be even more agile. While moving fast is great for delivering application features and functionality, speed shouldn't come at the cost ...
AWS Converts Cedar Policy-as-Code Tool to Open Source Project
At the Open Source Summit North America conference today, Amazon Web Services (AWS) announced it is making Cedar, a language for defining permissions as policies that includes automated reasoning to mathematically prove ...
GitGuardian Survey Surfaces Secrets Management Challenges
A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting that ...
ReversingLabs: Increased Focus on Software Supply Chain Security
A global survey of 300 global executives, technology and security professionals found software containing vulnerabilities (82%) followed by secrets leaked through source code (55%), malicious code (52%) and suspicious code (46%) posed ...
FIDO/WebAuthn Passkeys is Inevitable: Get on the Train ¦ IBM CEO Hates WFH
Richi Jennings | | 2FA, Arvind Krishna, authentication, devsecops, FIDO, google, Hybrid Work environment, ibm, managing remote workers, MFA, multi-factor authentication, multifactor authentication, Passkeys, Remote work, The Long View, two factor, WebAuthn, WFH, work from home, working from homeIn this week’s #TheLongView: The Passkeys authentication standard gets a huge boost, and Arvind Krishna wants workers back in the office ...
How DevSecOps Addresses Supply Chain Security
Gaurav Belani | | devsecops, software development, software security, Software Supply Chain Security, supply chain“The absence of security in the initial stages of system engineering is the single most significant cybersecurity gap and risk in modern system development.” This quote from tech entrepreneur Linda Rawson is ...
Codenotary Previews Secure SBOM Creation Service
Codenotary today made available a preview of a centralized repository service for generating and storing software bills of materials (SBOMs) that makes it simpler to securely share them as necessary. Moshe Bar, ...
Linux 6.3: What’s New ¦ AWS Layoffs are a Worry
Richi Jennings | | Amazon, Amazon Web Services, AWS, careers, DevOps careers, layoffs, linux, Linux 6.3, tech layoffs, The Long ViewIn this week’s #TheLongView: A new Linux kernel drops and layoffs at Amazon Web Services point to trouble ...
Cycode Adds ASOC Module to Streamline DevSecOps Workflows
Cycode has added a module to its platform for mapping metadata and events using graph technology that makes it simpler for application development and cybersecurity to consolidate alerts generated by their DevSevOps ...
GitLab Survey Reveals DevSecOps Gains
A global survey of 5,010 IT leaders, CISOs and developers published by GitLab this week found well over half (56%) of respondents are working for organizations that are using DevOps or DevSecOps ...
Report: Most IT Teams Can’t Fix Open Source Software Security
Mike Vizard | | dependencies, Lineaje, open source, Open Source Security Foundation, software securityLineaje, a provider of a platform for securing software supply chains, today published an analysis of 41,989 open source components embedded in the top 44 popular projects managed by the Apache Software ...
