The rapid adoption of the cloud has led companies to increasingly secure open-source components in modern software. The newly released 12th Building Security In Maturity Model (BSIMM12) report found a 61% increase in software security groups’ identification and management of open source over the past two years. The report was created by Synopsys, a company … continue reading
IBM and Linux Foundation AI (LFAI) launched Machine Learning eXchange (MLX) as a one stop shop for trusted data and AI artifacts in open source and open governance. MLX provides a collection of free, open source, state-of-the-art deep learning models for common application domains. The curated list includes deployable models that can be run as … continue reading
Today, Vertica announced the release of its new unified software-as-a-service (SaaS) offering, Vertica Accelerator. With this, users get high-performance and scalable analytics as well as end-to-end, in-database machine learning to organizations that require the right level of resourcing, management, and control for each analytical use case. Vertica Accelerator operates on AWS public cloud infrastructure in … continue reading
AWS announced the release of Amazon QuickSight Q, a natural language query tool for the Enterprise Edition of QuickSight. It uses Natural Language Understanding (NLU) to discover the intent behind questions and is able to answer questions that refer to all data sources supported by QuickSight, according to AWS. This includes data from all AWS … continue reading
Elastic has recently announced new capabilities and updates to the Elastic Stack and Elastic Cloud. The upgrades focus on simplifying data management and onboarding, as well as enabling users to achieve faster data insights. Among the upgrades featured is native Google Cloud data source integration with Google Cloud Dataflow. This provides users with faster data … continue reading
Microsoft yesterday announced its new Microsoft Surface Duo and is now inviting developers to start building or enhancing apps for dual-screen devices. The best way to start is by using Jetpack Window Manager, according to Guy Merin, the senior director of engineering at Microsoft, in a blog post. It has a FoldingFeature class providing device-specific … continue reading
Cloud adoption is at an all-time high, and an overwhelming majority of organizations run at least part of their business in the cloud. A 2020 report from IDG found that only 8% of respondents claimed their total IT environment was on-premises, meaning that for 92% of companies, part of their infrastructure or applications are hosted … continue reading
Parasoft has expanded its API and SAST testing with enhanced OWASP support. The upgrade features penetration testing, which shifts security testing into developer workflows. This shift will address API security issues by identifying vulnerabilities in APIs. The platform integrates Parasoft SOAtest and Smart API Test Generator with OWASP ZAP to build security into development workflows. … continue reading
OpenVSCode provides a version of VS Code that runs on a server on a remote machine and allows access through a modern web browser. It’s based on the same infrastructure used by Gitpod or GitHub Codespaces at scale. According to the project’s GitHub page, in 2019 the VS Code team began refactoring its architecture in … continue reading
Google today announced Google Cloud Deploy, a managed, opinionated continuous delivery service that makes continuous delivery to GKE easier, faster, and more reliable. Deploying container image artifacts into various environments remains a difficult task to many, and there are still no agreed-upon best practices. “Google Cloud Deploy is the product of discussions with more than … continue reading
Just over half of developers feel that security policies stifle their innovation and only about a third of developers reported that they are thoroughly educated on the security procedures they are expected to execute, according to a new report by VMware and Forrester. Forrester conducted a VMware-commissioned survey called “Bridging the Developer and Security Divide” … continue reading
GitLab announced the release of GitLab 14.3 with project-level security scan execution policies, next generation SAST to reduce Ruby false positives, group level permissions for protected environments and group access for the GitLab Kubernetes Agent. The project-level DAST and secret detection scan execution policies allow users to require DAST and secret detection scans to run … continue reading
DevOps has been a talking point in the development space for about a decade, but despite its age, some feel it’s still in its early days. One such person with that belief is Steve Kearns, the vice president of product management at Elastic, who joined SD Times podcast “What the Dev?” to explain his reasoning. … continue reading
Recently, Google added a Cloud Shell integration within each documentation page. This allows users to test code in a virtual machine instance directly from the documentation, cutting down on shifting between the documentation and a terminal window to run commands in a tutorial. Google Shell also comes already installed with common command-line tools, programming languages, … continue reading
