Endor Labs Adds Analytics and Patching Tools to Secure Open Source Software
Endor Labs today at the Black Hat USA 2024 conference revealed it has added an ability to determine how challenging it might prove to be to upgrade an open source software package, including its potential to break an application, to its platform for securing software supply chains.
Survey Finds Speed of Software Deployment Outpacing Security
A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.
The Future of Observability: How OpenTelemetry is Shaping IT Operations in the Age of AI
OpenTelemetry (OTel) is going to do for IT operations what open-source software originally did for application development.
How to Migrate an Observability Platform to Open-Source and Cut Costs
Migrating to an open-source stack is a better solution as it gives you control over telemetry data and reduces observability costs, despite challenges with existing service provider commitments.
Open-Source Software Community Riled by Yet Another CVE
Another maintainer of an open-source software project has decided to no longer actively update IP address parsing utilities used widely by JavaScript developers.
Embrace Extends Mobile App Alliance with Grafana Labs
Grafana Labs and Embrace, a provider of a platform for troubleshooting mobile applications, this week extended their alliance to include integration with Grafana Cloud.
Lineaje Adds Module to Manage Open Source Software Security Lifecycle
This can help DevSecOps teams identify open source software projects that are not being well maintained.
Logz’s AI Chatbot Makes Your Observability Tools Smart(er)
Everyone is adding AI to their applications. Sometimes that’s overkill. But Logz.io’s IQ Assistant, which purports to make the most of your software stack’s records, actually makes sense.
AlmaLinux Introduces Engineering Steering Committee to Enhance Community Collaboration
AlmaLinux is keeping its Linux community in the technology loop.
OpenSSF Siren: Security for One, Security for All
The OpenSSF Siren is a fresh, new take on ye old security mailing list.
Three Reasons DevOps Should Consider Rocky Linux 9.4
The new version of Rocky Linux includes security improvements, better cloud images, and the latest developer tools. All those features should interest any DevOps pro.
Does More Money Improve Open Source Security?
It sounds simple: If you pay developers more money they’ll improve the quality and security of their code. The evidence isn’t so clear.
Mind the Shift: Answering Common Questions About OpenTofu
A lead contributor to OpenTofu answers the (truly) frequently asked questions about the open source project.
Valkey is Rapidly Overtaking Redis
Redis is taking it in the chops, as both maintainers and customers move to the Valkey Redis fork.
The Role of AI in Securing Software and Data Supply Chains
Expect attacks on the open source software supply chain to accelerate, with attackers automating attacks in common open source software projects and package managers.
OpenSSF warns of Open Source Social Engineering Threats
Linux dodged a bullet. If the XZ exploit had gone undiscovered for only a few more weeks, millions of Linux systems would have been compromised with a backdoor. We were lucky. But can we stay lucky? The Open Source Security Foundation (OpenSF) and the OpenJS Foundation revealed that a similar hackling attempt had targeted several […]
How to Migrate an Observability Platform to Open Source
Migrating to an open source stack gives you control over telemetry data and reduces observability costs. Here’s how to do it with open source.
The Commonhaus Way to Manage Open Source Projects
Commonhaus is taking a laissez-faire approach to open source group management.
OpenTofu Denies Hashicorp’s Code-Stealing Accusations
The legal battle between the faux-open-source HashiCorp and the open source OpenTofu heats up.
Securing Open Source Software, the Cyber Resilience Act Way
The Eclipse Foundation is spearheading an effort to create a unified framework for secure software development.
Hashicorp Versus OpenTofu Gets Ugly
Hashicorp is accusing the open source OpenTofu Project of swiping some of its BSL-licensed Terraform code. Enter the lawyers.
OpenTelemetry Project Maintainers Add Code Profiling Capabilities
OpenTelemetry maintainers added profiling capabilities to enable DevOps teams to identify the root cause of issues down to a specific line of code.
Leveraging eBPF for DevSecOps
The applications for enhancing security observability with eBPF are vast, and it’s increasingly valuable for DevSecOps use cases.