Broadcom Virtual Cloud Foundation Update Streamlines DevOps Workflows
Broadcom at the VMware Explore 2024 conference today updated its VMware Cloud Foundation (VCF) platform to provide both deeper levels of integration, multitenancy capabilities and a single console through which all VCF components can be managed.
Apica Adds Ability to Centrally Manage Telemetry Data Collected via Multiple Agents
Apica today added the ability to centralize the management of telemetry data collected from multiple types of agents to its Apica Ascent observability platform.
Changing the Face of Software Development Security: CodeOps
CodeOps and GenAI are aligned: CodeOps treats code produced using GenAI as yet another source of code and focuses on solving the security and discoverability problems inherent in the reuse of existing assets.
GitHub Steers Copilot Autofix Into Eye of AI Security Storm
GitHub has come forward with its new Copilot Autofix tool. This AI-driven software service is targeted at developers who need to address software vulnerabilities in code destined for traditional applications and inside those infused with an injection of new or existing breeds of AI.
Breaking Free from Ransomware: Securing Your CI/CD Against RaaS
For developers, few things are more precious than their codebase. Yet, a chilling trend is emerging: Ransomware-as-a-service (RaaS) attacks targeting CI/CD pipelines, holding valuable code hostage.
Don’t Shift Left Without a Platform
How do you keep the rigor of specialists when things are being run by generalists? The answer is a platform.
DevSecOps: Integrating Security Into the DevOps Lifecycle
DevSecOps isn’t just ticking boxes; it is about weaving security into the fabric of software creation from start to finish, which not only tightens protection but also speeds things up and keeps us on the right side of regulations.
AWS Closes Selection of Cloud Code Tools for New Customers
New AWS customers will no longer be able to sign up for AWS Cloud9 (a cloud-based Integrated Development Environment) and the AWS CodeCommit private Git repository service.
Five Great DevOps Job Opportunities
This week’s five DevOps job postings include a remote CI/CD engineer role at CrowdStrike and a DevOps engineer at BAE Systems.
DevOps and Passing the Test Phase
In DevOps, the ability to release software fast, sometimes multiple times a day, is imperative. Developers must be ready to conduct and complete testing in minutes, sorting out whether software is ready to advance to the next phase or if teams should move on from the project. Detecting and resolving bugs before a release enters […]
Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software
Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, including its potential to break an application, to its platform for securing software supply chains.
Microsoft GitHub Alignment Fuels Birth of the AI Developer
Microsoft is partnering with GitHub to enable its 100 million+ developers to build AI applications directly on the GitHub platform.
Survey Finds Speed of Software Deployment Outpacing Security
A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.
ZEST Security Brings Generative AI to Cloud Infrastructure Security
ZEST Security has launched a platform that leverages generative artificial intelligence (AI) to remediate code created using infrastructure-as-code (IaC) tools.
The Risks of the Cloud Oligopoly
The cloud oligopoly, insofar as it stifles competition, represents a potentially overlooked area in which businesses must assess their supply chain commitments.
Succeeding at DevSecOps Requires a Rubric for SDLC Governance
Now is the time to engage your SDLC stakeholders and begin the journey of securing your development pipelines — the future of your organization’s security depends on it.
Survey Surfaces Mass Open Source Java Migration
A global survey of 663 IT professionals with Java expertise finds 86% are migrating some portion of their applications to an open-source edition of the Java platform or have already migrated (25%).
Five Lessons Learned the Hard Way From the Global Blue Screen of Death
Don’t wait until the pain is unbearable. Invest in people, processes and tools to ensure that you will never be put in the position of explaining why a bug in one small file impacted the entire world.
AI-Powered Solutions for Azure DevOps Pipelines
The integration of artificial intelligence (AI) into Azure DevOps pipelines transforms the manual software development and delivery process.
Survey Surfaces Troubling Signs of Software Supply Chain Insecurity
A survey of software engineering professions has uncovered disconcerting signs of software supply chain insecurity.
4 Reasons Why Tech Leaders Should Prioritize the Testing & Mocking Phase for Better Development
Automated testing and mocking need to be the most prioritized area in your SDLC to eliminate friction for your developer team.
Implementing Threat Modeling in a DevOps Workflow
Integrating threat modeling into the DevOps workflow is essential to identify and mitigate potential security threats.
Real-Time Monitoring of Third-Party APIs: Benefits and Implementation
Exploring the benefits of real-time API monitoring for third-party integrations and provides a guide on implementing it effectively.