Survey Finds Speed of Software Deployment Outpacing Security
A survey of 5,315 individual contributors and leaders in development, IT operations and security finds two-thirds (66%) are releasing software faster than they were a year ago.
Ensuring Application Security from Design to Operation with DevSecOps
Safe development is critical for any company that creates software, whether for its own use or for others. DevSecOps principles focus on automating information security processes and introducing security measures early in software development. DevSecOps is extremely important these days as, according to recent surveys, more than 99% of tech professionals report that, on average, […]
Why Business Risk Observability is Becoming Critical for Modern Applications
Full visibility into hybrid infrastructures is crucial for supporting the secure development and deployment of modern applications.
Decoding DevSecOps: Striking the Right Balance
DevSecOps has promise and pitfalls, and we need a path forward to achieve a balance between speed and security.
A Gentle Introduction to Continuous Monitoring and Optimization
The main objective of continuous monitoring is to help companies identify problems early enough for a DevOps team to address them before bad things happen.
Unlocking DevOps Mastery: A Comprehensive Guide to Success
DevOps is about breaking down silos, fostering collaboration, and promoting a culture of shared ownership and accountability. But at its core, DevOps is as much about culture as it is about technology.
Harness Survey Surfaces Raft of DevOps Challenges
A survey of 500 software engineering leaders (38%) and practitioners finds nearly half reporting they can’t release code to production without risking failures, with 39% noting their code fails to push to production at least half the time.
The Role of DevOps in Orchestrating Enterprise-Wide Cloud Security
By implementing DevSecOps practices, organizations can proactively address security concerns early in development, reducing vulnerabilities.
AISecOps: Expanding DevSecOps to Secure AI and ML
AISecOps, the application of DevSecOps principles to AI/ML and generative AI, means integrating security into models’ life cycles.
Securing the DevOps Pipeline: Tools and Best Practices
Because of the critical nature of the DevOps pipeline, security is becoming a top priority. Here’s how to integrate DevSecOps.
Techstrong Research: Combatting CI/CD Security Anti-Patterns
Techstrong Research finds the imperative to secure the software supply chain and CI/CD pipelines is undeniable and urgent.
Salesforce Adds Ability to Apply Custom Security Policies to APIs
Salesforce added the ability to customize API security policies to the Mulesoft Anypoint API management platform.
Mobb Extends DevSecOps Reach of Tool to Generate Patches
Mobb added an ability to instantly surface patches for vulnerabilities at the time when code is being committed during a DevSecOps workflow.
Hybrid Cloud in 2024: Trends and Predictions
Hybrid cloud environments are becoming increasingly pivotal for DevOps teams, and the trend looks to continue in 2024.
Shared Responsibility? Yeah.
Don MacVittie reminds us that the shared responsibility model was really cloud vendors telling us that we still have to protect our apps, no matter where they’re deployed.
How Encryption Innovation Will Power Cloud Privacy for Developers in 2024
With new encryption technologies rapidly advancing, developers can ensure their applications are secure.
BMC Mainframe Survey Results Show a Platform on the Rise
A BMC survey found he majority of those who are most enthusiastic about the mainframe’s future are relative newcomers to the platform.
Who Should Have Access to Production?
In a perfect world, no one would have access to production, as that’s the safest way to make sure there won’t be any issues.
But Are You a Platform?
Don MacVittie asks, ‘Do you really need all the functionality of a platform, or will a single tool suffice?’
At Some Level, We’re Doing Security Wrong
Don MacVittie explains that today’s security approaches just aren’t cut out for the threats organizations face.
Checkmarx Surfaces Threat to GitHub Repositories
Checkmarx reported that malicious actors have been able to compromise GitHub’s Dependabot, the free automated dependency management tool for software projects.
Unused Code: Proving a Negative
Don MacVittie says there’s a lot of unused code floating around out there – and that’s a big problem.
Steady On. We Still Have a Job to Do
AI-generated change is not significantly different than the last couple decades where change has become IT’s constant companion.