Home Tags Security

Tag: security

GitHub revokes stolen code-signing certs, invalidates some versions of Atom and GitHub Desktop for Mac

GitHub reports that a “set of encrypted code-signing certificates” were exfiltrated from private repositories used in the planning […]

The biggest blocker to DevSecOps? Security teams and devs not getting on: Report

A new DevSecOps survey of enterprises says that only 28 percent of CISOs are confident that production applications […]

EU’s proposed CE mark for software could have dire impact on open source

The EU’s proposed Cyber Resilience Act (CRA), which aims to “bolster cybersecurity rules to ensure more secure hardware […]

CircleCI security incident report: customer secrets stolen, unauthorised access to GitHub repos and third-party systems

DevOps player CircleCI has published details of the security incident that forced it to warn cloud customers to […]

Researchers demonstrate a thousand installs of fake VS Code extension in 48 hours

Researchers at Aqua Security have shown how easy it is to distribute an extension to Visual Studio Code […]

State of DevOps report 2022: for secure software, team culture counts more than technology

Google’s DORA (DevOps Research and Assessment) team has published its 2022 State of DevOps report, finding a drop […]

Microsoft’s devcontainer.json: Just for VS Code or an evolving standard?

Last month,  Microsoft declared that “dev containers have become broadly useful for scenarios beyond VS Code” and introduced […]

Break point: GitHub, Istio, Snyk, SQLite, Vitesse, and Twist

GitHub opened its database of open source-related CVEs and security advisories for community contributions this week. The company […]

Break point: Cassandra, Elastic, GitHub, KubeOne, New Relic, and CNCF

Users of Apache Cassandra who haven’t updated their systems in the last couple of days should consider an […]

Update alert: GitLab and Argo CD push out fixes for new high severity issues

GitLab and the Argo CD project have released a number of security fixes, strongly recommending users to upgrade […]