DevSecOps
AWS Saves Ukraine’s Data | WPF ‘is not Dead’ (yet) | Devs Quit for Cash
Richi Jennings | | Amazon, Amazon S3, AWS, Everybody wants to be famous—but nobody wants to do the work, framework, frameworks, job hopping, job search, microsoft, Russia, salary, Snowball Edge, The Long View, Ukraine, windowsIn this week’s The Long View: Amazon S3 is keeping Ukraine’s data safe, we ask if Windows Presentation Foundation is dead, and developers tell us why they switch jobs ...
Rezilion Updates Open Source MI-X Tool to Better Secure App Development
Mike Vizard | | application security, Rezilion, secure code, Software Supply Chain, vulnerability scanningRezilion has updated its open source MI-X vulnerability discovery tool to include mitigation and remediation recommendations. In addition, the tool can now produce machine-readable output in either a JSON or CSV format ...
How SASE Can Ease DevSecOps Adoption
DevSecOps is a software development methodology that merges development (Dev), security (Sec) and operations (Ops) into one team that integrates security throughout the entire software development life cycle (SDLC). The goal is ...
EU Data Privacy: Try Again | SkyPilot: Choose Cheapest Cloud | WFH: Better Meetings
Richi Jennings | | cloud cost management, data privacy, Data Privacy Framework, Europe, GDPR, If you want the rainbow—you gotta put up with the rain, Max Schrems, Multi-cloud, privacy, Remote work, SkyPilot, The Long View, WFHIn this week’s The Long View: EU-U.S. Data Privacy Framework reemerges, Berkeley brings cloud selection box, and proof that remote work is good work ...
Why Backups and Compliance Go Hand-in-Hand
James Ciesielski | | backups, compliance, Cybersecurity, databackup, disaster recovery, hacks, soc2 complianceIt’s hard to run a business. Besides the numerous challenges you have to deal with daily, ensuring the security of your business and customer information is essential for operating smoothly. In order ...
ActiveState Makes All Tiers of Curated Artifact Repository Service Free
ActiveState today announced it is making all tiers of its ActiveState Artifact Repository service available for free for a limited time. The move aims to enable organizations to better secure open source ...
Prioritizing Product Security With DevSecOps
Building software with strong security can no longer be an afterthought for organizations. The need for a reliable cybersecurity posture has proven vital amid the constant attacks we're seeing across industries, all ...
Massive Number of Transitive Dependencies Traced to Open Source Code
An analysis of nearly 2,000 software packages published by Endor Labs found 95% of all application vulnerabilities can be traced back to a transitive dependency created when a developer used an open ...
Codenotary Extends Dynamic SBOM Reach to Serverless Computing Platforms
Codenotary has extended the reach of its platform for automatically generating software bills of materials (SBOMs) to serverless computing platforms running software constructed using functions. Codenotary CTO Dennis Zimmer said because serverless ...
Dead Downtown: It’s YOUR Fault | Pentagon’s FOUR Cloud Vendors | Apple Adds MORE Price Flexibility
Richi Jennings | | Amazon, Apple, AWS, azure, Department of Defense, DoD, google, Google Cloud Platform, Hybrid Work environment, IaaS, JEDI, JWCC, microsoft, Microsoft Azure, Oracle, Oracle Cloud Platform, Remote work, Remote Worker, remote workers, remote workforce, remote working, The Long View, WFH, work from home, working at home, working from homeIn this week’s The Long View: Home working is ripping the heart out of cities, the DoD’s bizarre cloud strategy, and Apple adds a $10,000 app price option ...
Chainguard Adds Private Edition of Code Signing Platform
Chainguard today added a private preview of a Chainguard Enforce Signing service, enabled by the open source Sigstore project, that allows developers to generate digital signatures for software artifacts using identities and ...
How Devs Can Improve Open Source Security in the Enterprise
Modern applications are dynamic. They’re distributed and they’re often born in the cloud. These applications can be developed on the fly, spun up and scaled quickly to meet evolving user and market ...
