Java services hit hardest by third-party vulnerabilities, report says

Most developers have adopted devops, survey says

As of the first quarter of 2024, 83% of developers were involved in devops-related activities such as performance monitoring, security testing, or CI/CD, according to the State of CI/CD Report 2024, published by the Continuous Delivery (CD) Foundation, a part of the...
Java services hit hardest by third-party vulnerabilities, report says

Rust gets security fix for Windows vulnerability

The Rust language team has published a point release of Rust to fix a critical vulnerability to the standard library that could benefit an attacker when using Windows.Rust 1.77.2, published on April 9, includes a fix for CVE-2024-24576. Before this release, Rust’s...
Java services hit hardest by third-party vulnerabilities, report says

Synopsys takes aim at software supply chain risks

Synopsys has introduced Black Duck Supply Chain Edition, a software composition analysis (SCA) package that helps organizations mitigate upstream risk in software supply chains, including from AI code.Announced April 9, Black Duck Supply Chain Edition is intended to...