Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Your SpringShell (Spring4Shell) Remediation Cookbook Using the JFrog Platform

A new zero-day exploit in the spring-web package called “SpringShell” (nicknamed “Spring4Shell”) was just leaked and is threatening the internet and the community. The JFrog security research team is investigating the exploit and continuously updating our blog post with technical details on the SpringShell vulnerability.

Azure Spring Clean Stop Committing Your Secrets - by Dwayne McDaniel GitKraken

No one wants their keys and secrets on GitHub, but one bad push can mean you are suddenly exposed. Git and open source provide a way to automatically check for secrets on every commit! Dwayne McDaniel is the Developer Evangelist for GitKraken. This talk was released as part of Azure Spring Clean 2022 conference. Learn more about GitKraken's legendary tools for Git, including GitKraken Client, GitLens for VS Code, and Git Integration for Jira.

Revamp your backup strategy and redefine data security this World Backup Day!

Did you know that March 31 is World Backup Day? Who knew data backup was important enough to get its own day? I didn’t until recently, which may be the case for you as well, but that’s okay. It is never too late to learn about the importance of security practices like backing up data and establishing a routine that includes said practices.

New StackPod Episode: Implementing an SRE Practice with Yousef Sedky of Axiom/Hyke

For our latest StackPod episode, we invited Hyke’s DevOps team lead and AWS Cloud architect: Yousef Sedky. Axiom Telecom is one of the largest telephone retailers in the United Arab Emirates and Saudi Arabia and Hyke, its sister company, is a distribution platform for mobile products.

Getting started with DNS attacks

Whenever an online service goes down, you're likely to hear three words: "it was DNS!" Blaming DNS might be a running joke among network admins and engineers, but it's one rooted in experience. DNS problems are known for causing massive, Internet-wide outages such as the 2021 Akamai outage that temporarily made the websites for Delta Air Lines, American Express, Airbnb, and others unreachable.

A guide to Linux for embedded applications

An embedded device is a hardware and software system that performs a dedicated function within a larger computer system. It is typically resource-constrained and comprises a processing engine. The software of an embedded Linux system runs on top of the Linux kernel, the fundamental core of the OS with complete control over everything occurring in the system. It follows an embedded Linux system simply denotes an embedded system running on the Linux kernel.

Building Your Security Analytics Use Cases

It’s time again for another meeting with senior leadership. You know that they will ask you the hard questions, like “how do you know that your detection and response times are ‘good enough’?” You think you’re doing a good job securing the organization. You haven’t had a security incident yet. At the same time, you also know that you have no way to prove your approach to security is working. You’re reading your threat intelligence feeds.

Announcing Prepress v2

Today I am very excited to announce a major new version of Cloud 66 Prepress, our No Ops tool for deploying static sites. Last year we released Prepress to help our customers deploy static sites to AWS S3. With support for Jekyll, Hugo, and Gatsby, Prepress is everything you need to deploy your static site to your account on all major cloud providers. Today, we are taking Prepress to a whole new level.