DevSecOps
IBM ‘is Ageist and Sexist’ | IBM Mainframe-aaS | IBM Vaccine Mandate
Richi Jennings | | ageism, careers, cloud and mainframe, COVID-19, Devops for z/OS, Great Resignation, ibm, IBM Cloud, IBM Wazi, mainframe, mainframe security, remote working, The Long View, Those who know do not speak; those who speak do not know, WFH, work from home, z/OSIn this week’s The Long View: IBM’s employment practices get held up to scrutiny, IBM z/OSaaS breaks cover, and IBM encourages staff back to the office ...
How the Cybersecurity EO Impacts DevOps Teams
Eric Greenwald, general counsel for Finite State, talks with Mike Vizard about how the executive order for securing software supply chains issued by president Biden will impact DevOps teams. The video is ...
How to Automate PKI for DevOps With Open Source Tools
Historically, DevOps and security have been diametrically opposed practices. DevOps wants to move fast and break things, or so they say, but security policies tend to slow things down. However, it has ...
Unreliable Server Scare | Information Batteries | ARM IPO PDQ
Richi Jennings | | ARM, cosmic rays, Fall seven times and stand up the eighth, Green data center, Information batteries, machine learning, muons, NVIDIA, reliability, SoftBank, The Long ViewIn this week’s The Long View: We worry about chips failing randomly, we ponder a new way of thinking about workload shifting, and we grok Arm’s IPO ...
Codenotary Launches Cloud Service to Generate SBOMs
Codenotary has launched a Codenotary Cloud platform that can automatically generate a software bill of materials (SBOM) and make it easier to discover what components have been included in an application. Moshe ...
Why Developer-First is the Future of AppSec
DevOps culture and rapid cloud adoption mean developers are shipping code faster than ever and, in many cases, security teams struggle to keep up. To avoid relegating security to afterthought status, organizations ...
WhiteSource Tightens Code Scanning Tool Integration with Azure DevOps
WhiteSource has added the Microsoft Azure DevOps platform to the list of continuous integration/continuous delivery (CI/CD) platforms its open source vulnerability scanning tools natively supports. Susan St. Clair, director of product management ...
App Store Antitrust Bill | GDPR vs. Google Fonts | Wordle Worth $1M+
Richi Jennings | | app stores, Apple, devsecops, GDPR, google, , Open App Markets Act, The Long View, The New York Times, WordleIn this week’s The Long View: The Open App Markets Act polls well among devs, Germany fines a website for using Google Fonts, and the NY Times buys Wordle for an unfeasible ...
Continuous Security: The Next Evolution of CI/CD
Following a wave of high-profile cyberattacks and the White House’s release of the executive order on improving the nation’s cybersecurity, how to build a successful cybersecurity program has never been so hotly ...
Embedded Connectivity Solves the Right (and Left) Problem
In Steven Bellovin’s book, "Thinking Security: Stopping Next Year's Hackers," (2015) he wrote: "Companies are spending a great deal on security, but we read of massive computer-related attacks. Clearly, something is wrong ...
Improving Software Security in 2022
Pieter Danhieux | | developer skills, secure code DevSecOps, Secure Code Warrior, Secure Software Summit, shift leftThe recent Log4j vulnerability showed just how quickly a security bug could disrupt not just an industry, but the entire world. Organizations, especially federal agencies, will always find themselves at some level ...
4 Ways to Combat the DevOps and Security Workforce Shortage
Yes
Most people are painfully aware that security breaches have increased in recent years, while at the same time becoming much more sophisticated in their approach. Additionally, ever-expanding application environments and continuously evolving ...
