Topic: devsecops
How these companies help organizations with DevSecOps
We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings. Their responses are below. Guy Eisenkot, VP of product and co-founder of Bridgecrew by Prisma Cloud As hybrid work environments and cloud infrastructure environments become the norm, organizations’ attack surfaces are only getting … continue reading
Solving the challenges of shifting security left
Amidst the “Shift Left and Extend Right” security trend, developers find themselves needing to implement more robust security practices into their processes. Idan Plotnik, co-founder and CEO of Apiiro, provider of an application risk management platform, discussed the ways in which developers can mitigate critical security risks in order to better protect themselves and their … continue reading
Changing developers’ approach in Generation DevSecOps
The various trends around software development: small team sizes, faster velocity and the styles of building software are here to stay and organizations will need a new way in which to train their developers. This is according to Pete Chestna, CISO of North America at Checkmarx, in the SD Times Live! on-demand webinar “Cloud Engineering … continue reading
Recent major infrastructure attacks have put cybersecurity at the forefront
Recent large-scale attacks on enterprise and infrastructure security have led the federal government and private businesses to rethink the way they manage security. Last month’s ransomware attack on the Colonial Pipeline shut down the main part of its network for five days, affecting fuel supplies across the United States. Additionally, an attack on SolarWinds infrastructure … continue reading
Security shifts left as a team effort
As organizations look towards DevSecOps as a way to infuse security throughout the software development life cycle while at the same time accelerating releases, more sides of the business have their hands on deck regarding security. However, it’s still the security side that’s on the hook when a major breach happens. “People like to say … continue reading
Report: DevOps offers faster releases, but security still a pain point
The COVID-19 pandemic has led teams to focus on embracing DevOps technologies such as Kubernetes, ML/AI and cloud computing, and as a result, 84% of developers say they’re releasing code faster than ever before. That was one of the key findings in GitLab’s fifth annual DevSecOps survey, which this February asked 4,300 DevOps team members … continue reading
SD Times Open-Source Project of the Week: Teller
Teller is an open-source productivity secret manager that aims to help developers with cloud-native apps and multiple cloud providers. The tool was built by developer-first cybersecurity company Spectral as a way to tackle the “last mile problem” of securing sensitive access and preventing data leaks. With Teller, developers never have to leave their terminal to … continue reading
SD Times news digest: IBM’s DevOps hybrid cloud capabilities, Sentry announces new performance monitoring support, and Harness updates its open-source module
IBM announced two new capabilities to help developers deliver intelligent application analysis throughout the DevOps pipeline. The first one is IBM Application Discovery and Delivery Intelligence (ADDI) for IBM Z V, which allows developers to accelerate application development by enabling them to gain insight into their business-critical application estate after which they can immediately get … continue reading
SD Times news digest: Qualcomm’s first AR reference design, GitLab 13.9, and Sider’s new programming language support
Qualcomm has announced it’s first augmented reality reference design. The new Qualcomm Snapdragon XR1 AR Smart Viewer Reference Design aims to reduce commercialization time for OEMs to deliver high-quality immersive experiences. According to the company, users get a 30% reduction in overall power consumption in the system, the 2D app framework provides a systems-level feature … continue reading
SD Times news digest: OpenSSF lays out new technical vision, Anchore and GitLab on DevSecOps, and ActiveState’s new funding for security-first development
Since inception last year, the Open Source Security Foundation (OpenSSF) community has been focused on helping developers use and share high-quality software with security handled proactively. As a continuation of its commitment, the foundation is creating a Criticality Score as well as a Security metrics dashboard for open-source projects that will help prioritize which open-source … continue reading
Developers take a larger role in security
As companies shift their businesses to engage with customers online, developers are becoming a center point for innovation. So as these companies build out DevOps and DevSecOps practices, they’re assembling teams around the developer to ensure that as they’re building new features at a rapid pace, security and operations components move along with that. Yet … continue reading
Easing the development burden
Installing and configuring a fully integrated multi-software tool DevSecOps environment can be a long, tenuous burden for many organizations, often taking months from start to finish. Consider, instead, standardizing on a single application delivery platform — a set of integrated development, security, and operations tools — to increase productivity and accelerate installation and configuration of … continue reading
