How an Effective AppSec Program Shifts Your Teams From Fixing to Building
Development teams are under growing pressure to build cutting-edge applications with shorter development lifecycles. However, they are often slowed down by the growing burden of fixing security vulnerabilities. Ineffective application security processes mean these teams can spend more time firefighting than building, diverting focus from their primary objective: Delivering innovative, high-performance software. Yet, healthy security […]
Data-Driven Feedback Loops: How DevOps and Data Science Inform Product Iterations
The iterative process is greatly enhanced by data-driven feedback loops, which allow teams to systematically collect, analyze and act on data to inform product decisions.
Improving the Developer Experience by Deploying CI/CD in Databases
How can developers use CI/CD to improve their database software deployment process, and where should they begin?
Crossing the DevOps Performance Chasm With Continuous Feedback
Continuous Testing, Quality, Security, and Feedback — is essential for organizations aiming to become DevOps high-performers.
Game on: Go Multiplayer Mode to Supercharge your Internal Platform
How can organizations level up the value of their internal platforms without massively expanding their platform teams?
Operations as Code: Transforming Operational Excellence
The push toward digital transformation and cloud-native infrastructure is inevitable. This shift brings the need to manage operations with the same rigor and automation we apply to infrastructure or security. Many organizations have embraced the ideas of everything in a pipeline and all things as code. While platform engineering and other teams have created answers […]
The Rising Cost of Digital Incidents: Understanding and Mitigating Outage Impact
With a mean resolution time of 175 minutes, each customer-impacting digital incident costs both time and money. The industry needs to reset and revisit current processes so we can evolve and change the trajectory.
CISA: Critical Jenkins Flaw Exploited in Ransomware Attacks
The security vulnerability in the popular open-source development tool helps threat actors gain initial access into victims’ systems.
GitHub Steers Copilot Autofix Into Eye of AI Security Storm
GitHub has come forward with its new Copilot Autofix tool. This AI-driven software service is targeted at developers who need to address software vulnerabilities in code destined for traditional applications and inside those infused with an injection of new or existing breeds of AI.
Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software
Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, including its potential to break an application, to its platform for securing software supply chains.
Focus on Basics or Innovation? DevOps Success Requires Both
DevOps teams are experiencing a chasm between traditionalists and innovators — a rift that grows as pressure mounts for teams to leverage the latest advancements. Traditionalists are fighting to preserve the basics, to carry an appreciation for the early days of DevOps, and to not cut corners (look no further than CrowdStrike).
Survey Finds Speed of Software Deployment Outpacing Security
A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.
The Risks of the Cloud Oligopoly
The cloud oligopoly, insofar as it stifles competition, represents a potentially overlooked area in which businesses must assess their supply chain commitments.
Five Lessons Learned the Hard Way From the Global Blue Screen of Death
Don’t wait until the pain is unbearable. Invest in people, processes and tools to ensure that you will never be put in the position of explaining why a bug in one small file impacted the entire world.
Survey Surfaces Troubling Signs of Software Supply Chain Insecurity
A survey of software engineering professions has uncovered disconcerting signs of software supply chain insecurity.
Let’s Finally Build Continuous Database Reliability! We Deserve It
Over the past few decades, we have undergone significant transformations, enhancing our ability to improve software delivery and creating new methodologies and frameworks to improve collaboration among teams. Despite these advancements, the existing software development lifecycle (SDLC) is still far from flawless. Teams invest a considerable amount of time in the handover of artifacts, and […]
Policy-as-Code Will Rule Your CD Pipelines
If you are using tools with PaC, start building some policies, and if not, consider experimenting with those tools.
Survey Surfaces Significant Adoption of AI Tools to Build Software
A global survey of 5,315 IT professionals that included 804 C-level executives and 1,439 security experts finds 39% of respondents reporting they work for organizations currently using artificial intelligence (AI) to build software.
JFrog Acquires Qwak to Meld MLOps and DevOps Workflows
JFrog today revealed it has acquired Qwak to add a machine learning operations (MLOps) platform to its existing portfolio of DevOps tools and platforms.
Broadcom Updates to VMware Portfolio Streamline DevOps Workflows
Broadcom today extended VMware Cloud Foundation (VCF) to provide templates that promise to make it simpler for DevOps teams to provide self-service catalogs to developers building applications on top of the private cloud based on an integrated compute, storage and networking platform.
Platform Engineering: The Evolution to DevOps-as-a-Service
Platform engineering represents the evolution of DevOps into a more structured and service-oriented model, effectively embodying the principles of DevOps-as-a-service.
Evolving ECM: The Shift to GraphQL for Enhanced API Efficiencies
Over time, it has become clear that developers prefer GraphQL over REST APIs for web client interfaces to deliver and use content more effectively.
Shreds.AI Launches LLM Platform Trained for Software Engineering
Shreds.AI today unveiled a namesake generative artificial intelligence (AI) platform based on a large language model (LLM) it trained to specifically automate software engineering tasks.