| |
| Here's a look at today's Dev briefing. - Traceable released the Global State of API Security report.
- GitHub added new AI-based application security testing features.
- MOW filed a complaint against Google's IP Protection proposal with the CMA.
Thank you. Sudarshan
p/sudarshan | |
| 1 | | Traceable's Global State of API Security revealed that over half (57%) of respondents rated the importance of APIs for their organization's digital transformation at 7 or higher. Traceable surveyed over 1,600 respondents from 32 countries to prepare the report. More: - 88% of organizations use more than 2,500 cloud applications, and this increased reliance signifies the role and importance of APIs.
- 56% of respondents feel this increasing volume of APIs makes it difficult to stop attacks, and 58% believe APIs expand the attack surface.
- 60% of organizations suffered an API-related data breach in the past two years, of which nearly three-quarters experienced at least three breaches.
- API-related data breaches lead to financial loss, loss of IP, brand value erosion, failure in company operations, and loss of customers.
|     | |
| 2 | | GitHub announced the preview of three AI-based features within GitHub Advanced Security. The new features aim to help developers and security teams collaborate seamlessly to find and fix security issues within GitHub. More: - Code scanning received an autofix capability to help developers accelerate their fix times, improve productivity, reduce technical security debt, and write more secure code.
- The autofix feature provides AI-based fixes for CodeQL JavaScript and TypeScript alerts directly within pull requests with precise and actionable suggestions to quickly understand the vulnerability and how to fix it.
- Secret scanning, currently available through a public beta, detects generic or unstructured secrets in the code using AI and displays its findings in a separate tab called "Other."
- Further, GitHub introduced an AI-powered experience for authoring custom patterns, which includes real-time dry runs for accurate scanning before saving the newly created patterns.
- GitHub also unveiled the new security overview dashboard, providing security managers and administrators with a historical trend analysis of their security alerts.
| | | |
| A message from our sponsor, Impact. |  | | As marketers, when it comes to measuring partnership performance, it can often feel like we’re playing detective. We ask ourselves, 📈 “How do influencers, affiliates, and other partners impact my bottom line?” 🧩 “Where does partnership marketing fit in the buyer journey?” 📊 ”How can I track these partnerships so that I can make better strategic decisions?” And maybe even, 😭 “Will I ever break free from manual spreadsheet reporting?” We get it. At impact.com, we’re on a mission to solve the mystery about how brands are tracking, measuring and reporting on partner performance. Can you spare 7 minutes to aid our investigation? Each response brings us closer to solving the partnership measurement puzzle. And as a token of our appreciation, you'll have a chance to win a $200 gift card! Take the Survey | |
|
| 3 | | The Register reported that The Movement for an Open Web (MOW) filed a complaint against Google's IP Protection proposal with the UK's Competition and Markets Authority. Chrome is expected to include IP Protection potentially in Chrome 122, due in January 2024. More: - According to this proposal, IP Protection, formerly known as Gnatcatcher, sought to improve user privacy by protecting users' IP addresses and minimizing disruptions to the normal operations of the servers.
- To obfuscate a user's true public IP address, the IP Protection feature runs Chrome browser connections through two proxies, one managed by Google and the other by a third party like Cloudflare.
- In its complaint, the MOW claimed that the project violated Google's commitments to the CMA to get the latter's approval to replace third-party cookies with Privacy Sandbox.
- In a statement to The Register, a Google spokesperson said the two-hop proxy system ensures Google, along with the rest of the industry, will not see the client IP address and user destination.
| | | |
| 4 | | Kubernetes operations and cost management startup CAST AI raised a $35M Series B round. Vintage Investment Partners led the investment round that saw participation from Creandum AB and Uncorrelated Ventures. More: - CAST AI leverages artificial intelligence to help AWS, Google Cloud, and Microsoft Azure customers optimize their cloud bills by analyzing multiple data points to determine the optimal cost-performance ratio.
- At the KubeCon + CloudNativeCon event last week, the startup also unveiled two new features, Workload Rightsizing and PrecisionPack, that it claims will boost efficiency and enhance the predictability and stability of workloads.
- CAST AI's customer list includes Hitachi Ltd., Forbes Media LLC, Samsung Next LLC, Snow Commerice LLC, Surfshare Inc., Akamai Technologies, and Delio Ltd.
- The startup intends to use the funding to enhance its product further and hire new team members.
| | | |
| A message from our sponsor, Metricool. |  | | Looking for an affordable, all-in-one social media management tool? Welcome to Metricool. Whatever your social needs, Metricool is for you. With key features like: - Planning: Automatically publish to multiple social platforms, create Autolists for ever-green content, and easily duplicate top-performing posts.
- AI: Write your content with the help of an AI for those days you are drawing a blank or are in a creative rut.
- Team Management: Improve communication, create user roles, and improve workflows with a content approval process.
Save time and stay on top of your social media game. Create Your Free Account | |
|
| 5 | | New Tools and Updates: - New DevTools in Chrome 120 include the "Include third-party cookie issues" checkbox enabled by default, Privacy Sandbox Analysis Tool's pre-release version 0.3.2, enhancements to ignore listing, a new input mode toggle during remote debugging, and more.
- The next major release of Spin, version 2.0, enables WebAssembly component composition, improves performance, lays the foundation for Wasm portability across runtimes and implementations, and improves developer experience with capability support and SDK ergonomics.
- VMWare announced the general availability of Spring Boot 3.2 with support for Java 21 virtual threads and GraalVM native image compilation, SSL hot reload, and more.
- Ruby 3.3.0 preview3 introduces the Prism parser as a default gem, uses Lrama as a parses generator, adds a new pure-Ruby JIT compiler, and other performance improvements.
| | | |
| |
| 7 | | Quick Hits: - Elevate your Kubernetes skills with this must-read resource for building cloud-native applications. Get your Kubernetes Cookbook today.*
- The advocate general of the Court of Justice of the EU (CJEU) has asked judges to review a 2020 ruling that exempted Apple from paying €13B ($13.9B) in taxes in the European Union.
- Bombay Play's co-founders, Oliver Jones and Abhas Saroha, revealed how the startup grew its revenue ten times after Google Play's Indie Games Accelerator.
- The Swift Language Steering Group is prioritizing data-race safety by default, with a particular focus on fixing bugs and improving the Sendable checking mode.
*This is a sponsored listing. | | | |
| Upcoming Events | | NOV
25 | | AI in Financial Services with Saroop Bharwani | | | | | | | NOV
25 | | The Future of Fractional Work with David Berkowitz | | | | | | * This is a sponsored event | | | |
Term of the Day Backlinks: Backlinks are links coming from other websites that link back to a website, including articles, blog posts, or social media posts Question of the Week What perks would convince you to return to the office? Join the conversation |
 | Analyst | | Sudarshan lives in Toronto, Canada, and is an engineering graduate. He is passionate about business, tech, entrepreneurship, and politics. FUN FACT: Sudarshan worked for the election campaign teams of two heads of state in India. When he is not busy with work, he enjoys hiking, playing cricket, and cooking. | | This newsletter was edited by Aaron Crutchfield | |
| |
| |
|
| |
|
| |
Comments
Post a Comment