GitHub announced the general availability of GitHub Enterprise Server 3.6 with improvements for developers and security and administration teams. Github added more than 60 new features to the latest version. More: - New features include the availability of GitHub Discussions, navigating large and complex pull requests using file trees, and Server Statistics for collecting key aggregate metrics.
- Advanced security features such as the beta of all alert types in the enterprise-level security overview page, new dependency review features, and dry run to understand secret scanning custom patterns.
Separate but related: - GitHub released its plan to gradually shut down LGTM.com by Dec. 16. Semmle, the team that built LGTM.com was acquired by GitHub in 2019.
- GitHub is partnering with UNIwise to allow advanced security customers to scan for UNIwise tokens and block them from entering their private and public repositories with push protection.
| |
Microsoft announced the preview of Dev Box, preconfigured Windows VMs that enable developers to work on remote machines. Microsoft unveiled Dev Box at its Build 2022 event in May. More: - Dev Box is a cloud service that helps developers with a secure, ready-to-code, preconfigured workstation with all the necessary tools and settings.
- It supports all IDEs, SDKs, and tools that run on Windows.
- Developer leads can choose from 4 vCPU/16 GB to 32vCPU/128 GB SKUs to scale any size population.
- Windows is offering the first 15 hours of the dev box 8V CPU and 32 GB memory SKU for free every month, along with the first 365 hours of the dev box Storage SSD 512 GB SKU.
- Organizations will be charged based on a per-hour basis depending on the number of Compute and Storage that are consumed.
| |
 A message from SECURITY COMPASS Current approaches to software threat modeling simply don’t work. They are: - Manual
- Inconsistent
- Take too long
- Don’t scale
- Don’t give developers what they need
When software security and compliance are considered more as an afterthought, rather than a vital step in the development process, organizations end up trying to remediate security and compliance issues after software has been written, rather than preventing issues in the first place. Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure and compliant software. Empower DevSecOps teams to make software secure and compliant by design through automating threat modeling, generating application security requirements, and providing secure development and compliance best practices. The SD Elements platform is the best solution for organizations who need to scalably model software threats, identify countermeasures, and deliver secure, compliant code quickly. Download whitepaper bundle
| |
Linus Torvalds launched the release candidate of Linux 6.0 for public testing. Linux kernel 5.19, released two weeks ago, was the last release in the 5.x series. More: - Torvalds wrote in the announcement post that the number change does not signify a fundamental change.
- Torvalds expected Rust infrastructure and the multi-gen LRU VM to be included with the release but it did not happen.
- Linux 6.0 contains over 13,500 non-merge commits and over 800 merged commits, and most of the updates are focused on improving the GPU, networking, and sound.
- The final version is expected in early October, either the 2nd or 9th.
| |
Superblocks, a platform for building custom internal apps, raised a $37M funding round from Kleiner Perkins, Greenoaks, Spark, Meritech, and a few individual investors. More: - Superblocks' platform provides developers with tools to build internal apps, workflows, and jobs connected to enterprise data sources.
- It allows developers to deploy with version control, use their own CI/CD pipeline, and add production observability.
- Its founding team plans to invest the new capital into its existing products, launch new ones, and deliver world-class engineering support for customers.
- The New York-based startup's customers include Motive, Payhawk, Clearco, Papaya Global, and Alchemy.
| |
 A message from LAIKA If you’re trying to close deals, SOC 2 is probably a thorn in your side. What is it, and who cares? Your business needs SOC 2. But building compliance from scratch is complicated, time-consuming, and the cost can be crippling. Laika has you covered. Uncomplicate SOC 2 with our guide for growth-minded founders. In the guide by Laika you’ll learn: - What is SOC 2 compliance and why it matters for your startup
- How to close more deals faster by becoming SOC 2 compliant
- How to prepare for SOC 2 compliance
- What to expect in terms of time and cost
- What to do after the report is in
What makes Laika the authority on SOC 2? They’re the only compliance automation solution that was built by compliance experts. Learn how to turn compliance from a pain point into a secret edge over your competitors. Download Now 
| |
New Tools and Updates: - Microsoft announced the availability of .NET 6 in Ubuntu 22.04. Through its new partnership with Canonical, Microsoft released .NET with Chiseled Ubuntu Containers for making ultra-small container images. The Chiseled Ubuntu image is 100MB smaller than the usual Ubuntu images.
- The Supabase-js v2 release candidate comes with quality-of-life improvements such as support for type generators, new Auth and Auth admin methods, and improvements for edge functions.
- Wix released its new Site Inspection tool to enable developers to monitor the status of their pages in Google's index from the Wix dashboard. The data in the dashboard is populated directly from Google via its URL inspection API.
- Low-code platform for building cross-platform apps, Flutterflow released version 3.0. The latest version allows users to build and deploy web apps, add custom functionality with code, and extend its marketplace functionalities.
| |
| |
Quick Hits: - Quality products made specifically for a man's nether region. Get 20% off + free shipping at manscaped.com. Your balls will thank you®.*
- Google rolled out Android 13 with improvements to Material You design, privacy upgrades, and multiple language support for apps to Pixel devices on Monday. Other manufacturers, such as Samsung, Motorola, and One Plus, will receive the update later this year.
- Developer cloud infrastructure provider DigitalOcean warned emails of a few of its customers may have been exposed following the data breach at Mailchimp.
- Unity announced it has rejected a $20B merger offer from mobile advertising platform AppLovin.
- Around 1,900 Signal customers were affected by the recent security breach at Twilio.
- Same old marketing automation not cutting it these days? Get our eBook and power up your customer experiences.*
*This is a sponsored post.
| |
Upcoming Events: - August 24 - AMA with Matt Mahar (Cana) (Register Here)
- August 31 - AMA with Sophia Amoruso (Business Class) (Register Here)
- September 07 - AMA with Andrew Gazdecki (MicroAcquire) (Register Here)
- September 09 - AMA with Jay Ryan (Security Compass) (Register Here)
- September 14 - AMA with Brian Dean (Backlinko) (Register Here)
- September 21 - AMA with Kristen Ruby (Ruby Media Group) (Register Here)
- September 28 - AMA with Leigh-Ann Buchanan (aīre ventures) (Register Here)
- October 12 - AMA with Bill Glenn (Crenshaw Associates) (Register Here)
- October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here)
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
Security Compass is on a mission to accelerate software time-to-market while managing risk. | |
| |
Comments
Post a Comment