News
Radware Embraces APIs to Improve AppSec Across Multiple Clouds
Radware this week launched an application programming interface (API) approach to securing multiple clouds designed from the ground up to be an extension of a DevSecOps workflow. Eyal Arazi, a senior product ...
Google Allies With GitHub to Secure Software Supply Chains
Google today revealed it has been working with GitHub to create a forgery-proof method for signing source code as part of an ongoing effort to better secure software supply chains. Bob Callaway, ...
Survey Shows Increased Focus on Modernizing IT, Retiring Apps
A survey of 140 enterprise architects and IT leaders published today suggested that, while moving applications to the cloud remains a priority, more attention is being paid to reducing technical debt by ...
New Relic Adds SLO Tools to Observability Platform
New Relic this week made a service level indicator (SLI) and service level objective (SLO) capability generally available within the New Relic One observability platform. The new capability makes it possible for ...
Facebook Bans Innocent Users | Azure and ARM/Ampere | ‘Great Resignation’—No End in Sight
Richi Jennings | | Ampere, ARM, azure, facebook, google, Great Resignation, Microsoft Azure, No legacy is so rich as honesty, The Long View, WFHIn this week’s The Long View: No remedy for banned Facebook users, new ARM-based VMs on Microsoft Azure, and The Great Resignation will still be a Thing for the foreseeable ...
Researchers Find Privilege Escalation Vulnerability in GitHub Repos
Legit Security today revealed that it discovered a privilege escalation vulnerability in GitHub repositories that has since been remediated. Liav Caspi, Legit Security CTO, said the company worked with GitHub to remediate ...
Fixing Spring4Shell Starts With Software Supply Chain Management
Mitch Ashley | | devsecops, java, open source software, Software Supply Chain, Spring, Spring Core, Spring4shellSpring4Shell is the latest call to action for radically improved software supply chain integrity. While Spring4Shell investigations continue, one conclusion is indisputable: We must holistically rethink the way we continuously inventory and ...
GitLab Updates CI/CD Platform to Improve Dev Productivity
GitLab has made available a 14.9 update to its namesake continuous integration/continuous delivery (CI/CD) platform that adds epic-linking, integrated security training, rule mode for scanning result policies and a revamped design, among ...
Lapsus$ Shames Okta/Sitel | Bitcoin Nukes Climate | EU DMA E2EE FAIL
Richi Jennings | | bitcoin, cryptocurrency, Digital Markets Act, encryption, Europe, LAPSUS$, Okta, Sitel, The Long View, Uneasy lies the head that wears the crownIn this week’s The Long View: Okta and Sitel under fire over Lapsus$ hack, Greenpeace and others call for bitcoin change, and Europe still hates encryption ...
GitLab Allies With Rezilion to Add Workload Analysis Tool
Rezilion has integrated its workload analysis tool with the continuous integration (CI) framework provided by GitLab. The move is part of an effort to make it simpler for developers to discover issues ...
Rocket Software Extends DevOps Reach to IBM I Platforms
Rocket Software has added support for the IBM I platform as part of its relaunch of a DevOps platform that also runs on IBM mainframes. Chris Wey, president of the data modernization ...
Harness Acquires ChaosNative to Meld Chaos Engineering, DevOps
Harness this week announced it acquired ChaosNative as part of a plan to more deeply integrate chaos engineering with DevOps workflows. At the same time, the company added a Harness Service Reliability ...
