Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

Shipa Product Updates - April 2022

Depending if you are in the Northern Hemisphere, Spring is upon us. We have been busy at Shipa democratizing developer experience for all and making Kubernetes an afterthought. Grateful for all the community and customer feedback helping us make Shipa better. If you have an idea, check out our new Idea Portal where you can your own ideas. Let’s take a look at what we have delivered in the last pair of sprints.

How mission critical services build for failure ft. Hector Aguilar of Okta

If you can’t get through Okta, you can’t do your job. But failures happen. With this reality its not about preventing failure but about dealing with failure. Rob is joined by Hector Aguilar, former VP of Technology at Okta shares how he helped create a culture expecting and prepared for failure.

April/2022 - CVE-2022-22965: Spring4Shell Remote Code Execution Mitigation

Recently, a Remote Code Execution vulnerability was discovered in the Java Spring Core library. This vulnerability allows attackers to execute arbitrary code on affected systems. You can find more information on that vulnerability in the announcement on the Spring Blog. While HAProxy Enterprise, HAProxy ALOHA, and other products within the HAProxy Technologies portfolio are not impacted by this (they do not use the Spring Core library at all), you can use our products to mitigate the attack.

A Primer for Monitor as Code: How to use Splunk Observability Cloud with Terraform

Managing the complexities of today’s cloud native infrastructure has resulted in the increased need for observability. As cloud adoption continues to grow, the need to deliver a better customer experience, scale efficiently and increase momentum on innovation has never been more important. For many organizations to carry out these principles, two technologies are helping organizations deliver on these goals faster: Monitoring-as-Code and Infrastructure-as-Code.

Your SpringShell (Spring4Shell) Remediation Cookbook Using the JFrog Platform

A new zero-day exploit in the spring-web package called “SpringShell” (nicknamed “Spring4Shell”) was just leaked and is threatening the internet and the community. The JFrog security research team is investigating the exploit and continuously updating our blog post with technical details on the SpringShell vulnerability.

Azure Spring Clean Stop Committing Your Secrets - by Dwayne McDaniel GitKraken

No one wants their keys and secrets on GitHub, but one bad push can mean you are suddenly exposed. Git and open source provide a way to automatically check for secrets on every commit! Dwayne McDaniel is the Developer Evangelist for GitKraken. This talk was released as part of Azure Spring Clean 2022 conference. Learn more about GitKraken's legendary tools for Git, including GitKraken Client, GitLens for VS Code, and Git Integration for Jira.

Revamp your backup strategy and redefine data security this World Backup Day!

Did you know that March 31 is World Backup Day? Who knew data backup was important enough to get its own day? I didn’t until recently, which may be the case for you as well, but that’s okay. It is never too late to learn about the importance of security practices like backing up data and establishing a routine that includes said practices.

Getting started with DNS attacks

Whenever an online service goes down, you're likely to hear three words: "it was DNS!" Blaming DNS might be a running joke among network admins and engineers, but it's one rooted in experience. DNS problems are known for causing massive, Internet-wide outages such as the 2021 Akamai outage that temporarily made the websites for Delta Air Lines, American Express, Airbnb, and others unreachable.