White House to Spend $11 Million to Study Open Source Software Use
Hardening the security around open source software has been a key part of the White House’s larger cybersecurity efforts since President Biden released his executive order for improving the United States’ security posture in May 2021, only months after taking office. Now the Biden Administration and the Department of Homeland Security (DHS) are putting $11 […]
Want to Stop Kernel Panics? Use eBPF
eBPF is so groundbreaking. It is not just about kernel modules. User-level tools are also beginning to be outperformed by eBPF equivalents.
DevSecOps: Integrating Security Into the DevOps Lifecycle
DevSecOps isn’t just ticking boxes; it is about weaving security into the fabric of software creation from start to finish, which not only tightens protection but also speeds things up and keeps us on the right side of regulations.
AWS Closes Selection of Cloud Code Tools for New Customers
New AWS customers will no longer be able to sign up for AWS Cloud9 (a cloud-based Integrated Development Environment) and the AWS CodeCommit private Git repository service.
Five Great DevOps Job Opportunities
This week’s five DevOps job postings include a remote CI/CD engineer role at CrowdStrike and a DevOps engineer at BAE Systems.
Say ‘No’ to ‘NoOps’: Why We Can’t Afford to Let AI Run Wild
As we anticipate the advancement of AI over the next decade, we must recognize that we are not equipped to grant these tools complete control.
DevOps and Passing the Test Phase
In DevOps, the ability to release software fast, sometimes multiple times a day, is imperative. Developers must be ready to conduct and complete testing in minutes, sorting out whether software is ready to advance to the next phase or if teams should move on from the project. Detecting and resolving bugs before a release enters […]
CloudBees Acquires Launchable to Advance Testing Using AI
CloudBees today revealed it has acquired Launchable, a provider of a test automation platform, to enable DevOps teams to improve both application security and software quality. Financial terms of the acquisition are not being disclosed.
Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software
Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, including its potential to break an application, to its platform for securing software supply chains.
Focus on Basics or Innovation? DevOps Success Requires Both
DevOps teams are experiencing a chasm between traditionalists and innovators — a rift that grows as pressure mounts for teams to leverage the latest advancements. Traditionalists are fighting to preserve the basics, to carry an appreciation for the early days of DevOps, and to not cut corners (look no further than CrowdStrike).
Survey: Usage of AI Rapidly Expands Once DevOps Teams Adopt
A survey of 504 DevOps professionals published today finds that 20% are now using artificial intelligence (AI) across all phases of the software development lifecycle (SDLC).
Microsoft GitHub Alignment Fuels Birth of the AI Developer
Microsoft is partnering with GitHub to enable its 100 million+ developers to build AI applications directly on the GitHub platform.
DARPA Turns to AI to Help Turn C and C++ Code Into Rust
DARPA will lean on emerging AI capabilities to deal with the costly and time-consuming challenge of rewriting C and C++ code to Rust in a move designed to meet the push for federal agencies and private organizations to adopt memory-safe programming languages.
Five Great DevOps Job Opportunities
Welcome to our weekly jobs report, including DevOps engineer roles at Mastercard and NBC Universal, for your perusal.
BMC Brings Generative AI to the Mainframe
BMC as part of a broader commitment to building generative artificial intelligence (AI) assistants to simply the management of mainframes, has made available in beta a tool that explains code functionality.
Delta CEO Puts Price Tag on CrowdStrike Damage: $500 Million
Delta Air Lines Inc. Chief Executive Ed Bastian has put a price tag on CrowdStrike Inc.’s debilitating outage to his airline, $500 million, leaving the company “no choice” but to seek damages from five days of disruptions.
Survey Finds Speed of Software Deployment Outpacing Security
A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.
Lightrun Adds Generative AI Tool to Debug Code in Runtime Environments
Lightrun this week added a runtime debugging tool that makes use of generative artificial intelligence (AI) to identify the root cause of issues in runtime environments.
ZEST Security Brings Generative AI to Cloud Infrastructure Security
ZEST Security has launched a platform that leverages generative artificial intelligence (AI) to remediate code created using infrastructure-as-code (IaC) tools.
Report: High Risks to Software Supply Chains are Commonplace
A nine-month analysis of more than 100 million alerts, tens of thousands of code repositories, and 140,000 real-world applications finds 95% of organizations have at least one high, critical, or apocalyptic risk within their software supply chain.
To Monetize HashiCorp, IBM Must Perform an Unprecedented Balancing Act
IBM’s multi-billion dollar deal to buy HashiCorp has left the hybrid cloud industry guessing what the future holds in store for the most popular provider of tools for DevOps and infrastructure-as-code (IaC).