DevSecOps
3 Must-Haves When Implementing DevSecOps
The term DevSecOps is already more than a dozen years old. DevOps—the practice of combining software development with IT operations to deploy applications faster—was first coined in 2008 and refined in a ...
How Work-From-Anywhere Impacts DevOps
Mike Vizard | | agile infrastructure, ciena, Cybersecurity, DevOps networking, devsecops, Remote workBrian Lavallée from Ciena talks with Mike Vizard about how the work-from-anywhere movement has impacted DevOps, networking and security. The video is below, followed by a transcript of the conversation. Mike Vizard: ...
Apple Outage Outrage | Linux Random Redo | Okta Hacked (or Not)
Richi Jennings | | Akamai, Apple, authentication, DNS, Identity, insider threats, LAPSUS$, linux, NIST, Okta, outage, random number generator, The Long View, This above all—to thine own self be trueIn this week’s The Long View: Why Apple services were down, Linux gets a huge RNG overhaul, and we wonder if Okta was hacked again ...
Secure Software Summit: Behold the SBOM
With supply chain security becoming more of a focus, the SBOM is now viewed as a critical element in shoring up supply chain security. SBOM stands for software bill of materials. At ...
Secure Software Summit: Reachability and Risk for Security Leaders
It is impossible to manage security posture without considering two key factors in any potential vulnerability or security flaw: Reachability and risk. The two factors are related. Reachability defines the degree to ...
Secure Software Summit: Measuring and Mitigating OSS Risks
Measuring and mitigating the security risks in open source software is becoming a major issue in the software development community. Attacks on open source software (OSS) are on the rise; open source ...
Secure Software Summit: Securing Software With Zero-Trust
With the increase of supply chain attacks on everything from logging software like Log4j to takeovers of important JavaScript packages to compromises of network utility tools like SolarWinds, more and more organizations ...
What Does AIOps Mean for SREs?
It seems SREs are of two minds when it comes to AIOps. On one hand, AIOps' potential is pretty exciting. By automating complex workflows and troubleshooting processes, AIOps could make your life ...
Secure Software Summit: The State of OSS Supply Chain Security
The open source software (OSS) supply chain is under attack. As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links ...
What is DevSecOps?
While traditional development practices have long separated security and compliance, DevSecOps as a series of best practices integrates security into every phase of the DevOps software development life cycle. DevSecOps introduces and ...
TikTok Shuns Russia | War on Patent Trolls | Chrome is ‘Faster than Safari’
Richi Jennings | | Apple, ByteDance, Good words shall gain you honor but good deeds shall gain you friends, non-practicing entities, Patent assertion entities, Patent trolls, Patents, Russia, The Long View, TikTok, UkraineIn this week’s The Long View: ByteDance restricts TikTok in Russia, Unified Patents escalates the fight against trolls, and Google Chrome beats the magic 300 ...
Ukraine Asks for DNS Censorship | Ukraine Snapchat Staff Danger | #BoycottKaspersky?
Richi Jennings | | DNS, ICANN, If an elephant has its foot on the tail of a mouse and you say that you are neutral the mouse will not appreciate your neutrality, Kaspersky Lab, Looksery, Russia, Sanctions, Snap, Snapchat, The Long View, UkraineIn this week’s The Long View: Censoring the Russian internet, Snap fears for hundreds of Ukrainian employees, and Eugene Kaspersky acts like a **** ...
