Features
The Problem With Security
As an IT professional with decades of experience at every level of technology and organizations—from cell phone prototyping to banking enterprise architecture, from entry-level to CTO—I can state definitively that I have ...
Encore Platform for Running Distributed Apps in the Cloud Arrives
Encore has made generally available a namesake backend development engine for rapidly building scalable distributed IT environments across multiple cloud platforms. Fresh off raising $3 million in seed funding, Encore CEO André ...
Blast Radius of GitHub Breach Major Security Concern
Mike Vizard | | code repo, developers, github, GitHub breach, security breach, Software Supply ChainThe extent to which software supply chains may be compromised in the wake of a security breach disclosed by GitHub may include thousands of organizations. GitHub has revealed that unauthorized parties compromised ...
Quali Adds Control Plane to Platform to Manage IaC
Quali has added a control plane to its Torque platform to give DevOps teams the ability to consistently provision and orchestrate infrastructure across a heterogeneous distributed computing environment. Amir Rosenberg, vice president ...
Not Totally Buying Web3? You’re Not Alone
The interest in Web3 is heating up. We've seen major excitement around blockchain and new Web3 protocols that are poised to reinvent the web as we know it. But it's hard to ...
ForAllSecure Adds Free Testing Tools for OSS
ForAllSecure is investing to make open source software (OSS) more secure and is making available free, personal-use versions of its Mayhem application security testing tools infused with artificial intelligence (AI) capabilities to ...
Microsoft Taps vFunction to Refactor Java Apps for Azure
Microsoft has teamed up with vFunction to make it easier to convert monolithic Java applications into a set of microservices that can be deployed on the Microsoft Azure cloud. The Microsoft Services ...
How DevSecOps Teams Can Level Up
In 2019, I wrote a post detailing the traits of DevSecOps—the practice can be defined as the process of security automation in which IT and security are more de-siloed. DevSecOps introduces a ...
Russian Dev Exodus | Puppet IPO FAIL | Intel 18A Ahead of Sched.
Richi Jennings | | Configuration Management, Heat not a furnace for your foe so hot that it do singe yourself, IaC, infrastructure as code, Intel, IPO, perforce, Puppet, Russia, The Long ViewIn this week’s The Long View: More than 100,000 tech workers leave Russia, Perforce buys Puppet, and Intel moves faster than planned ...
The Argo Project: Making GitOps Practical
If you’re a DevOps engineer, chances are you have at least heard the name “Argo,” seen the friendly squid logo, and wondered: What the heck is this tool everyone is talking about? ...
DevSecOps Tools: Hot Air Ahead
Don Macvittie | | code scanning, devsecops, devsecops automation, dynamic analysis, interactive analysis, software composition analysis, static analysis scanning toolsI, like most of you, don’t like hardcore marketing that hinges its statements on “Well, that’s technically true…” I also am not a fan of talking heads that spew predictions about the ...
Survey Sees Little Progress on Securing Software Supply Chains
A survey of 1,750 IT security decision-makers published today found that, despite a series of high-profile cybersecurity breaches, nearly two-thirds (62%) of respondents have done nothing to secure their software supply chain ...
