Topic: cloud native
Cloud-native success requires API security
The complexity of modern cloud-native applications, which often leverage microservices, containers, APIs, infrastructure-as-code and more to enable speed in app development and deployment, can create security headaches for organizations that fail to put practices in place to mitigate vulnerabilities. With dependencies on databases and third-party APIs, and sensitive information and secrets such as certificates and … continue reading
Heroku to stop offering free plans
Heroku stated that it will stop offering free product plans on November 28th and that it is planning to shut down free dynos and data services. Also, accounts that have been inactive for over a year and their associated storage will be deleted starting on October 26th this year. “Our product, engineering, and security teams … continue reading
Rafay Systems launches new open-source Kubernetes project
Rafay Systems launched a new open-source software project named Paralus to help keep users safe and applications secure on any Kubernetes environment for free. Paralus offers identity and access management throughout an organization by providing a single login zero-trust K8s solution to grant authorized users seamless and secure access to all clusters with a native … continue reading
GitHub enhances Codespaces with improved experience for working with multi-repository projects
GitHub announced new improvements that streamline the Codespaces experience when working with multi-repository and mono-repo projects. GitHub initially released Codespaces to address cloud-native applications that are housed in a single repository: the most common type of project on GitHub. For those that are developing a feature that spans many different types of services, GitHub added … continue reading
Linux Foundation launches cloud native developer bootcamp
The Linux Foundation and The Cloud Native Computing Foundation (CNCF) today announced a new Cloud Native Developer Bootcamp. The Cloud Native Developer Bootcamp works to provide developers, cloud architects, and others who are new to cloud native technologies with the tools needed to be successful in designing, building, and deploying cloud native applications According to … continue reading
SD Times news digest: .NET Framework January 2022 update, Lucidworks announces new SaaS platform, YugaByte University expansion
Microsoft released the January 2022 Security and Quality Rollup Updates for .NET Framework. This security update addresses an issue where an unauthenticated attacker could cause a denial of service on an affected system. Other quality and reliability improvements include an AppContext Switch that can clean up connections on any kinds of failures even while running … continue reading
SD Times news digest: Databricks launched Partner Connect; OpenAI’s API now available with no waitlist; Logz.io unveils observability updates
Databricks, the data and AI company, recently announced Databricks Partner Connect, a portal for users to quickly discover a broad set of validated data, analytics, and AI tools and easily integrate them with their Databricks lakehouse across multiple cloud providers. Integrations with Databricks partners Fivetran, Labelbox, Microsoft Power BI, Prophecy, Rivery, and Tableau are initially … continue reading
Securing cloud-native applications
Cloud-native development has become the de facto way that companies make new apps due to its speed and cost savings. While it has opened up the world of Kubernetes, containers, and serverless to most organizations, they still need to grapple with certain complexities and security concerns that this style of development brings. Concerning the use … continue reading
How these vendors help companies with cloud-native security
We asked these tool providers to share more information on how their solutions help companies secure cloud-native applications. Their responses are below. Rani Osnat, VP strategy and product marketing at Aqua Security From day one, we started out focusing on containers, because that was the big technology that was pushed in the earlier days with … continue reading
Changing developers’ approach in Generation DevSecOps
The various trends around software development: small team sizes, faster velocity and the styles of building software are here to stay and organizations will need a new way in which to train their developers. This is according to Pete Chestna, CISO of North America at Checkmarx, in the SD Times Live! on-demand webinar “Cloud Engineering … continue reading
SD Times Open-Source Project of the Week: Threatmapper
Threatmapper is a cloud-native security observability platform that scans, maps, and ranks vulnerabilities from development through production across serverless, Kubernetes, container, and multi-cloud environments. This Wednesday, it was open-sourced by Deepfence under the Apache 2.0 license. “By open sourcing ThreatMapper, we aim to help developers, DevOps, DevSecOps, and security teams identify and prioritize threats quickly … continue reading
Wind River acquires Particle Design
Wind River has announced that it completed the acquisition of the UI/UX design company Particle Design which brings UI/UX capabilities to the new Wind River Studio offering. Particle Design offers end-to-end UX research services that employ a range of methodologies from ethnographic research to user evaluations and usability testing; its design services include prototyping, interaction … continue reading
