Topic: security

SD Times news digest: Nutanix Mine for data protection, new AI company comes out of stealth, and Qt announces new changes

Nutanix Mine is now generally available, allowing users to experience data management capabilities on Nutanix’s enterprise cloud platform.  “Backed up data, kept in isolated and aging infrastructure is hard to access, difficult to manage, often stored on antiquated devices, and almost impossible to reuse,” Nutanix Mine wrote in a post. “This keen focus on data … continue reading

SD Times news digest: Mozilla releases technology ethics guide, Azure Databricks achieves HITRUST CSF certification, and Clubhouse raises $25 million

Mozilla released a guide for college students that want to enter the tech industry called “With Great Tech Comes Great Responsibility.” The guide has background on the history of tech organizing and advice from academics and  current and former tech workers on how to grapple with challenging choices.  Download the guide here. Azure Databricks achieves … continue reading

New open-source projects look to secure Kubernetes

Kubernetes security company Octarine has announced two new open-source projects designed to protect against cloud-native security vulnerabilities. The Kubernetes Common Configuration Scoring System (KCCSS) is a framework for rating security risks, and kube-scan is a workload and assessment tool.  “Our mission is to make the adoption of DevSecOps best practices simple, understandable, and achievable for … continue reading

SD Times news digest: Tasktop Hub 20.1, Scylla Enterprise 2019.1.4, and TriggerMesh’s seed funding

Tasktop announced the release of its Integration Hub v20.1 to simplify toolchain integration and to help scale enterprise software delivery.  The new release includes simple navigation of relationships between configuration elements, a new scheduler for full scans, the ability to configure the flow of private and public comments as well as a new connector Planview … continue reading

SD Times news digest: API Fortress’ Mass Functional Test Generation, Snyk raises $150 million, and TestProject and Sauce Labs’ codeless test automation plans

API Fortress has announced the new Mass Functional Test Generation solution. The new tool is a beta release that is expected to be made available later this month. It tackles API testing and monitoring, and provides the ability to generate large batches of test.  “With over 95% of API vulnerabilities caused by human error or … continue reading

CNCF introduces a Kubernetes bug bounty program

The Cloud Native Computing Platform is funding a new Kubernetes bug bounty program to reward the researchers who find security vulnerabilities in Kubernetes’ codebase as well as build and release processes.  The program was launched by the Kubernetes Product Security Committee together with bug bounty program vendor HackerOne.  “As a CNCF graduated project, it is … continue reading

DeepCode reveals the top security issues plaguing software developers

DeepCode has revealed the most important bugs as well as the top security vulnerabilities. The analysis comes from the company’s AI-powered code review tool, which analyzed hundreds of thousands of open-source projects to narrow down the vulnerabilities that happen with the most frequency.  According to the analysis, file I/O corruptions are the biggest general issue … continue reading

SD Times news digest: Synopsys acquires Tinfoil Security, Sisense announces $100 million funding round,and Postman updates its plans

Synopsys announced that it acquired Tinfoil Security, an innovative provider of dynamic application security testing (DAST) and API security testing solutions.  “Tinfoil Security provides Synopsys with proven DAST technology that can be seamlessly integrated into development and DevOps workflows. Furthermore, Tinfoil Security’s innovative API scanning technology addresses an emerging demand in the market and will … continue reading

SD Times news digest: Facebook fined again for Cambridge Analytica scandal, Google’s privacy commitment and Visual Studio 2019 for Mac version 8.4 preview 4

Brazil fined Facebook $1.6 million for their role in the Cambridge Analytica scandal. The country’s justice ministry said that the fines are tied to unlawful sharing of data from its users in Brazil. “It’s evident that the data of about 443,000 users of the platform were made available by the developers of the app ‘thisisyourdigitallife’ … continue reading

SD Times news digest: VMware’s acquisition of Pivotal, GitHub Enterprise on AWS Marketplace, and security patches for Git vulnerabilities

VMware announced that it completed the acquisition of Pivotal Software, a cloud-native platform provider. “We believe that modern application development solutions and practices need to be easily accessible to everyday enterprises across the globe. With Pivotal’s developer capabilities as the foundation, we’ll focus on delivering consumable, enterprise-ready cloud native offerings to customers to help them … continue reading

SD Times news digest: Mastercard acquires cybersecurity company, XR Association updates developers guide, and Nim’s gc:arc feature

Mastercard announced an agreement to acquire RiskRecon to help financial institutions, merchants and governments to secure their digital assets.  With RiskRecon’s AI and data-driven technology is designed to help organizations proactively manage cyber risks and better safeguard intellectual property and consumer and payment data.  “By becoming part of their team, we have an opportunity to … continue reading

Business logic flaws: How to address them during application design

Software applications have become significantly more complex over the past decade. This bodes well for the creation of new application-based business opportunities and additional customer touchpoints, however increased software complexity also opens the door for more malicious attacks and high-impact data leaks. Ever-nimble and determined threat actors are reinventing their approaches to align with current … continue reading

DMCA.com Protection Status