IT as Code
Typosquat Supply Chain Attack Targets Go Developers
A backdoor that impersonates a widely used database module in the popular Go programming language can give hackers control of infected systems, according to a senior threat intelligence analyst with developer-focused platform ...
CISA Pushes Steps to Better Secure Software and Product Designs
The country’s top cybersecurity agency is urging developers to take steps to ensure the software they’re building and the products they roll out are secure and protect end users. The Cybersecurity and ...
Operations as Code: Transforming Operational Excellence
The push toward digital transformation and cloud-native infrastructure is inevitable. This shift brings the need to manage operations with the same rigor and automation we apply to infrastructure or security. Many organizations ...
AWS Cloud Migration Strategy
Migrating your project means moving your data from the on-premises data center to the cloud. Migration is a big task and AWS facilitates migration in phases ...
CISA: Critical Jenkins Flaw Exploited in Ransomware Attacks
The security vulnerability in the popular open-source development tool helps threat actors gain initial access into victims' systems ...
White House to Spend $11 Million to Study Open Source Software Use
Hardening the security around open source software has been a key part of the White House’s larger cybersecurity efforts since President Biden released his executive order for improving the United States’ security ...
ZEST Security Brings Generative AI to Cloud Infrastructure Security
ZEST Security has launched a platform that leverages generative artificial intelligence (AI) to remediate code created using infrastructure-as-code (IaC) tools ...
Quali Bakes Generative AI into Environment as Code Platform
Quali has added a generative artificial intelligence (AI) capability to its Torque platform for managing infrastructure-as-code that enables DevOps teams to use natural language to describe a template, that is then automatically ...
Scaling with Terraform: How to Manage Infrastructure at Scale
These key points can help you effectively manage Terraform infrastructure at scale, ensuring your systems are resilient, scalable and compliant with organizational policies and industry standards ...
Polyfill Becomes a Supply-Chain Risk to 100,000 Websites
A Chinese company in February bought the domain and GitHub account for Polyfill, a popular open-source library used by more than 100,000 websites to deliver JavaScript code ...
RIP CentOS. Hello AlmaLinux Rocky Linux, CentOS Stream or RHEL
Steven J. Vaughan-Nichols | | AlmaLinux, centos7, linux, Linux distributions, red hat, rhel, Rocky LinuxCentOS 7's official end of life is June 30th. What should a DevOps team do? We help you consider your choices ...
AlmaLinux Introduces Engineering Steering Committee to Enhance Community Collaboration
AlmaLinux is keeping its Linux community in the technology loop ...
