JFrog swampUP: Keynotes and What’s Next
Techstrong Group’s Alan Shimel recaps the keynotes and what’s next from JFrog swampUP.
The Path to App Modernization: Benefits, Pitfalls and the Route to Success
There are many reasons an organization may find itself on the path to considering the risky journey of application modernization. It could be to gain an edge or to build a more competitive positioning, or a business could have a legacy system running on infrastructure that is no longer viable, leaving them no other choice. […]
JFrog Launches New Channel Partner Program
At JFrog’s swampUP event in San Jose, California, the company launched its Global Channel Partner Program.
Survey Surfaces Spike in Generative AI Usage Across IT
A survey of DevOps and SecOps leaders found nearly all are making use of generative artificial intelligence (AI).
3 Ways to Achieve Faster App Development Without Compromising Security
DevOps teams must maximize development speed without compromising security. Here are three ways to do that.
Stop Leaking Secrets!
All too often, software teams trip over complexities and inadvertently leave secrets exposed in private and public software repositories.
Gremlin Adds Detected Risk Tool to Chaos Engineering Service
Gremlin’s risk detection capability in its chaos engineering service automatically identifies issues that could cause outages along with recommendations to resolve them.
The Differences Between DevOps, DevSecOps and SRE
DevOps, DevSecOps and SRE are all quickly gaining traction within the tech world due to their effectiveness and promise of reliability for companies. Each framework provides various levels of safety and scalability—DevOps is agile, DevSecOps prioritizes security above all else and SRE focuses on performance optimization. Together, these are changing how software gets deployed from […]
80% of Bosses ‘Regret’ Stopping WFH ¦ PSA: Disable STS!
In this week’s #TheLongView: Rethinking return-to-office mandates and a ridiculous, ancient Windows bug.
Digital.ai Embraces Multiple AI Classes to Advance DevSecOps
Digital.ai has committed to adding generative artificial intelligence (AI) and additional machine learning capabilities to its namesake platform for managing DevSecOps workflows.
Snyk Survey: AI Generating More Vulnerabilities in Code
A Snyk survey finds the use of artificial intelligence (AI) to write code is creating a software security paradox.
Extending the GitOps Pipeline: DevSecOps and Trusted Application Delivery
The fusion of DevSecOps and trusted application delivery can extend the GitOps pipeline and add business value.
New Relic Adds App Security Testing Tool to Observability Platform
New Relic made available a public preview of an application security testing tool that will be integrated into its observability platform.
Shift Left With DAST: Dynamic Testing in the CI/CD Pipeline
By focusing on application security like an attacker would, DAST can discover potential security threats that static testing methods might miss.
Communicating Common Web App Security Threats to Developers
Shift left involves providing developers with the context they need to prioritize and remediate threats appropriately.
JFrog Adds Curation Capability for Open Source Software Components
JFrog is adding a curation capability for open source software that will use metadata generated by binaries to identify malicious packages and software components with licensing issues.
Tabnine Unveils Beta of Generative AI Automated Testing Tool
Tabnine this week made available in beta a tool that enables developers to use natural language to interact with the artificial intelligence (AI) models embedded within its test automation platform. Brandon Jung, vice president of ecosystems for Tabnine, said Tabnine Chat extends generative AI capabilities the company developed to make it simpler for developers to […]
Harnessing AI in Continuous Delivery and Deployment
In my recent article Revolutionizing the Nine Pillars of DevOps with AI-Engineered Tools, I explained that the continuous delivery pillar is an approach where code changes are automatically built, tested and prepared for release to production; this may be followed by continuous deployment where an approved release is automatically deployed to the production environment. The […]
HashiCorp Acquires BluBracket to Extend Secrets Management Reach
HashiCorp this week acquired BluBracket to add a set of static secrets discovery tools to its portfolio.
Bionic Extends Application Security Posture Management Platform
Bionic this week added a pair of tools to its application security posture management (ASPM) platform that make it simpler to triage threats based on severity and attach a risk score. Josh Cho, senior director of global systems engineering at Bionic, said the Bionic Signals and Business Risk Scoring tools ingest data from third-party security […]
How to Empower DevSecOps in a Complex Multi-Cloud Landscape
Organizations are embracing cloud-based application delivery for speed of delivery and scale. However, the proliferation of multi-cloud systems to access and maximize the cloud’s capabilities is driving complexity in IT environments. Many organizations do not consider how multi-cloud adoption is expanding their attack surface—and the risk is growing: The 2023 CrowdStrike Global Threat Report found […]
How to Avoid Risk When Using Multiple Low-Code Platforms
Organizations are still increasing their use of low-code/no-code (LCNC). But this adoption isn’t always consolidated around one tool—frequently, multiple low-code/no-code platforms are used under the same roof. In fact, Gartner predicts that by 2024, 75% of large enterprises will be using at least four low-code development tools for both IT application development and citizen development […]
The Security Pipeline
Over the last few years, the ability to secure our applications has grown, and deep integration into the DevOps toolchain has, too. There are more tools doing more security checks protecting more of the infrastructure and source than there have ever been. The key is putting them to use intelligently. We now have the ability […]