Observability: The Central Watchtower Your All-Seeing IT Needs
Database specialists and IT teams need a clear view of database performance telemetry if they want to maintain the health, stability and scalability of their services.
Lineaje Allies With Persistent Systems on Open Source Software Remediation Service
Lineaje and Persistent Systems are providing a managed service for remediating open source vulnerabilities that leverages AI technologies.
CISA, NSA Issue Supply Chain Security Guidance Report
The NSA, ODNI and CISA have issued guidance to assist software developers and suppliers in shoring up software integrity and security.
Where to Start With Secure Design – Tips for Developers
Designing secure software is an increasingly hot topic, and for good reason. In recent weeks, we’ve seen a global effort from governments and cybersecurity agencies to encourage security by design through new guidance and changes to procurement rules. During the G7 in May, the QUAD nations (Australia, India, Japan and the United States) released a […]
Redgate Automates Pulling of Test Data From Production Databases
Redgate’s Test Data Management (TDM) tool eliminates manual tasks that previously inhibited testing and protects PII.
Survey Surfaces Software Supply Chain Security Challenges
While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal.
Backslash ASPM Platform Prioritizes DevSecOps Efforts
Backslash announced general availability of an ASPM platform that identifies and prioritizes vulnerabilities based on ease of exploitation.
Software Deployment Security: Risks and Best Practices
In an era where software is at the heart of every business, deploying applications securely and efficiently has never been more critical.
DevOps Halloween: Tricks and Treats
In the spirit of Halloween, let’s explore the tricks and treats of DevOps choices to ensure your team ends up with a bag full of treats rather than some nasty tricks.
Digital.ai Update Extends Scope and Reach of DevSecOps Platform
A Denali update to Digital.ai’s DevSecOps platform promises to simplify integration of custom AI models with those developed by the company.
OpsMX Adds Deployment Firewall to Ensure Compliance
OpsMx has added a deployment firewall to its Deploy Shield portfolio for securing CI/CD platforms.
Survey Sees Spike in Untested Code Leading to a DevOps Crisis
A Sauce Labs survey found many developers admitted they pushed code into a production environment without testing.
GitGuardian Adds Tool for Discovering Secrets in Public Repositories
GitGuardian added a tool that makes it possible for DevOps teams to search GitHub repos to determine if secrets have inadvertently found their way into other apps.
Microsoft kills Python 3.7 ¦ … and VBScript ¦ Exascaling ARM on Jupiter
In this week’s #TheLongView: VS Code drops support for Python 3.7, Windows drops VBScript, and Europe plans the fastest ARM supercomputer.
Pulumi Previews Tool to Integrate Secrets and Infrastructure Management
Pulumi previewed a tool that enables DevOps teams to unify environments, secrets and configuration (ESC) management.
Checkmarx Surfaces Threat to GitHub Repositories
Checkmarx reported that malicious actors have been able to compromise GitHub’s Dependabot, the free automated dependency management tool for software projects.
Fortifying the Castle: A Quest to Secure the SDLC
Securing the SDLC is a never-ending battle against hidden risks and formidable adversaries and requires security champions to share their wisdom.
3 Steps to Secure Your CI/CD Pipelines
Palo Alto Networks’ Daniel Krivelevich shares a general three-step framework organizations can use to secure the CI/CD pipeline and surrounding areas.
Five Great DevOps Job Opportunities
Looking for a great new DevOps job? Check out these available opportunities at Fidelity Investments, Caterpillar and more!
What DevOps Teams Should Know About Phishing and the Supply Chain
DevOps engineers are prime targets for phishing as cybercriminals look to infiltrate and disrupt the software supply chain.
JFrog swampUP: Addressing the Advent of AI
Techstrong Group’s Alan Shimel and Will Willis talked with JFrog’s Stephen Chin about the impact of generative AI on software development.
Splunk: Creating a Resilient and Dynamic Organization
Mitch Ashley talks with Ryan Kovar, distinguished tech security technologist and leader of SURGe with Splunk, and Cory Minton, field CTO for The Americas with Splunk, about building a dynamic and resilient organization.
Summit Highlights Open Source Software Security Progress
The OpenSSF hosted a Secure Open Source Software (SOSS) Summit 2023 event during which it made available a Secure Open Source Software Vision Brief 2023.