| | |  Sudarshan | |
| |
Go released the results of its 2022 June edition of the Go developer survey. Around 5,750 developers shared their experience working with new features introduced in Go 1.18. More: - 25% of the respondents have started using the new feature, generics, in their code, and 86% were aware of its availability.
- Only 5% have already started using built-in fuzzing tools. Almost half (49%) of the respondents said they are open to using it but do not have a specific need for them right now.
- Evaluating third-party libraries, verifying the software developers are building, and applying best practices to write secure code were the top challenging aspects of ensuring software security.
- 93% of the respondents were satisfied with using Go during the past year.
| |
Vercel announced the release of Next.js version 12.3, the last update before its next major release. The third annual conference, Next.js Conf 2022, will be on Oct. 25. More: - New features and improvements in Next.js 12.3 include:
- improved fast refresh function with hot reload available for .env, .jsconfig, and .ts config files;
- new image component introduced as an experimental preview in version 12.2 is now stable;
- other stable features include remote patterns, the ability to disable image optimization, an SWC Minifier; and
- new documentation on built-in accessibility features.
- Upcoming features include route groups, instant loading states, error handling, templates, and new conventions to implement advanced routing patterns.
- At the event, Vercel plans to introduce features that leverage React server components, streaming, suspense, open-source tooling, and conventions to optimize and scale applications.
| |
 A message from COMPOSER Investing. Built Better. The last decade has seen an extraordinary bull run. Now as the markets tumble, is your portfolio adapting? - As inflation remains persistently high and the Fed continues to hike interest rates, we run the risk of a prolonged recession. Protecting your money in the face of these market conditions requires more than a robo-advisor and a prayer.
- With portfolios negatively impacted across the board, investors deserve an investment strategy that responds to market movement without hours of endless research.
- Composer gives you the financial firepower to invest in professionally created investment strategies that trade based on logic and data.
This powerful platform allows you to automatically invest in strategies that react to the market and capture the upside, while protecting your downside. Stop trading on impulse and start investing smarter. Invest Smarter Today
| |
Google's security team announced its OSS-Fuzz detected a serious vulnerability in the TinyGLTF project. The open-source fuzzing service regularly scans over 700 critical open-source projects for vulnerabilities. More: - Miscreants could have used the vulnerability in the TinyGLTF project to execute malicious code in projects using it as a dependency.
- The bug was patched immediately after it was discovered.
- The security team claims OSS-Fuzz has helped fix more than 8,000 security vulnerabilities and 26,000 other bugs in open-source projects since its launch in 2016.
- The fuzzing service has evolved from detecting C/C++ bugs to other languages such as Go, Rust, and Python.
- Developers integrating a new sanitizer into OSS-Fuzz and discovering at least two new vulnerabilities will receive an $11,337 reward from Google.
| |
Researchers at AT&T Alien Labs have discovered a new stealthy malware. The malware targets endpoints and IoT devices running on Linux operating systems. More: - The malware, dubbed Shikitega by the researchers, downloads and executes the Mettle, a meterpreter, to gain more control over infected devices.
- It also exploits system vulnerabilities to execute a crypto miner.
- The malware is delivered through polymorphic encoding, making it more difficult for anti-virus engines to detect it.
- It abuses legitimate cloud services to store its command and control servers.
| |
 A message from SECURITY COMPASS Current approaches to software threat modeling simply don’t work. They are manual, inconsistent, take too long, don’t scale, and don’t give developers what they need. When software security and compliance are considered more as an afterthought, rather than a vital step in the development process, organizations end up trying to remediate security and compliance issues after software has been written, rather than preventing issues in the first place. Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure and compliant software. Empower DevSecOps teams to make software secure and compliant by: - Design through automating threat modeling
- Generating application security requirements
- Providing secure development
- Compliance best practices
The SD Elements platform is the best solution for organizations who: - Need to scalably model software threats
- Identify countermeasures
- Deliver secure and compliant code quickly.
Learn How
| |
Last week, announcements from JetBrains included the release of Ktor 2.1.1 and Kotlin 1.7.20 RC. It also launched the Kotlin Multiplatform Mobile Content Creators Recognition Program. More: - Kotlin 1.7.20 release candidate comes with builder inference, updated source documentation for the new default memory manager, and other changes.
- JetBrains launched the creators' program to commemorate authors of articles, videos, and samples.
- The Koltin team is planning to choose and promote its favorite content once every three months,
- Content creators can share their articles, videos, sample projects, and other content to this email.
| |
Quick Hits: - Join ClickUp For Startups to scale success with hands-on support and free resources. Qualifying startups get $3,000 in credit.*
- Android released Privacy Sandbox developer preview 5 last week with additional functionality, data validation enhancements, and API signature changes.
- Mozilla's Chief Security Officer, Marshall Erwin, asked for stricter rules to protect user privacy at the U.S FTC forum on commercial surveillance and data security.
- Microsoft released the updated Surface Duo Design Kit, version 2.2. The Design Kit contains all the UX design suggestions and UI components for Surface Duo and Surface Duo 2.
- Researchers at Sentinel Labs have discovered a Qyick ransomware that is written in Go and features intermittent encryption.
*This is sponsored content.
| |
| |
Upcoming Events: - September 14 - What Do Developers Think of Threat Modeling? (feat. security experts from Security Compass, Dell, and Tricentis) (Register Here) *
- September 14 - AMA with Brian Dean (Founder of Backlinko) (Register Here)
- September 21 - Hired's Navigating Market Uncertainty: The State of Tech Hiring Webinar (Register Here) *
- September 21 - AMA with Kristen Ruby (Founder of Ruby Media Group) (Register Here)
- September 28 - AMA with Leigh-Ann Buchanan (Founder of aīre ventures) (Register Here)
- October 05 - AMA with Ram Bartov (Chief Accounting Officer at TripActions)* (Register Here)
- October 12 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here)
- October 19 - AMA with Zecca Lehn (Responsibly VC) (Register Here)
- October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here)
*This is a sponsored listing.
| |
 |  | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords. | |
According to JPMorgan quantitative hedge funds are buying $2bn-$4bn in equities a day. Join them today! | |
Security Compass is on a mission to accelerate software time-to-market while managing risk. | |
Comments
Post a Comment