Survey Surfaces Lots of Software Supply Chain Insecurity
A global survey of 900 application security professionals finds nearly two-thirds work for organizations that have had their software supply chains compromised in the past two years.
A Deep Dive Into Flaky Tests
Managing flaky tests is an ongoing iterative approach where you identify, understand and fix intermittent or unpredictable tests.
Open-Source Software Community Riled by Yet Another CVE
Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers.
Aqua Security Shines Spotlight on Secrets Management Blindspots
A report published by Aqua Security finds that as many as 18% of secrets inadvertently exposed are not being discovered.
Building Resilient Software Systems: The Power of Clean Architecture
Clean architecture is a software design philosophy that prioritizes the separation of concerns within a software system. Its primary aim is to develop systems that are simple to comprehend, maintain and extend.
IBM Makes Generative AI Platform for DevOps Available
IBM has made generally available a framework, dubbed IBM Concert, that leverages generative artificial intelligence and knowledge graphs to surface in real-time dependencies.
Fauna Adds Declarative Tool to Update Namesake Database
Fauna has added an ability to maintain strict enforcement of schema to its document-relational database using a declarative language that makes it simpler to update databases within the context of a DevOps workflow.
A Matter of Attitude
Most times, we only find what we’re looking for. Attitude is a key factor in how we perceive the world.
Five Great DevOps Job Opportunities
A round up of five great DevOps opportunities for your perusal, including positions at Cisco Systems and Costco Wholesale.
Polyfill Becomes a Supply-Chain Risk to 100,000 Websites
A Chinese company in February bought the domain and GitHub account for Polyfill, a popular open-source library used by more than 100,000 websites to deliver JavaScript code.
Most Critical Open Source Projects Lack Memory-Safe Code, CISA Says
The country’s top cybersecurity agency is continuing to urge software developers to adopt memory-safe programming languages to help reduce the number of vulnerabilities in their products.
SRE in the Age of AI
Site reliability engineering (SRE) is a concept introduced by Google in 2004 and since then it has been adopted by various leading software organizations. In its purest form SRE is what you get when you treat operations like it is a software problem. Industry-leading reports point out the strategic value that SRE offers to the […]
Orca Security Adds Ability to Scan Source Code for Vulnerabilities
Orca Security this week extended the reach of its cybersecurity portfolio to include an application that scans source code stored in GitHub and GitLab repositories for vulnerabilities.
Ensuring Application Security from Design to Operation with DevSecOps
Safe development is critical for any company that creates software, whether for its own use or for others. DevSecOps principles focus on automating information security processes and introducing security measures early in software development. DevSecOps is extremely important these days as, according to recent surveys, more than 99% of tech professionals report that, on average, […]
Enhancing Your Company’s DevEx With CI/CD Strategies
A company can improve its developer experience (DevEx) by tweaking its continuous integration and continuous delivery (CI/CD) process.
Infinidat Revolutionizes Enterprise Cyber Storage Protection to Reduce Ransomware and Malware Threat Windows
Waltham, Massachusetts, 27th June 2024, CyberNewsWire
Datadog Extends Scope and Reach of Observability Platform
Datadog at its DASH 2024 conference added a bevy of tools and capabilities to streamline DevSecOps workflows, including integration with open-source OpenTelemetry agent software developed under the auspices of the Cloud Native Computing Foundation (CNCF) and the Datadog On-Call tool to optimize incident management workflows in a way that maintains context with observability data already collected.
Logging Out
There will come a time when our online accounts live on well after we are gone, and our credit cards will be charged accordingly.
Cloud-First, Cloud-Smart to Cloud-Minimalism – A Strategic Shift
We do not know if cloud minimalism is the answer to cloud complexity, but it provides pathways to onboard and explore cloud computing.
FireTail Unveils Free Access for All to Cutting-Edge API Security Platform
McLean, United States of America, 26th June 2024, CyberNewsWire
Fostering an AI-Focused Engineering Team That Accelerates DevOps Maturity
An AI agent is a series of prompts that leverage AI to carry out a role within the engineering team, such as the business owner or tester.
Testing Agents: More than a Copilot
Copilots boost productivity for both use cases but are generally passive tools that must be fed precise requirements to get the desired results.
Sapient.ai Automation Platform Leverages AI to Create Unit Tests
Sapient.ai today launched a testing automation platform that makes use of artificial intelligence (AI) and automatically creates unit tests as the applications are developed.