Operations | Monitoring | ITSM | DevOps | Cloud

The latest News and Information on DevOps, CI/CD, Automation and related technologies.

The Log4j Log4Shell vulnerability: Overview, detection, and remediation

On December 9, 2021, a critical vulnerability in the popular Log4j Java logging library was disclosed and nicknamed Log4Shell. The vulnerability is tracked as CVE-2021-44228 and is a remote code execution vulnerability that can give an attacker full control of any impacted system. In this blog post, we will: We will also look at how to leverage Datadog to protect your infrastructure and applications.

Podcast: Break Things on Purpose | Mandi Walls, DevOps Advocate at PagerDuty

Take a trip down memory lane with Mandi Walls, to chat about the many changes over the years in chaos engineering and other ares of tech. We’ve also got the new addition to Gremlin’s Developer Advocacy, Julie Gunderson who has joined Jason to chat with their mutual friend. Mandi talks about her previous work alongside Julie, but also the variegated nature of her background in operations and systems administration.

Git Integration for Jira v4.0 - New Git Indexing

Zip into Git Integration for Jira version 4.0! Our team has been whipping up some speedy new features and improvements to enhance your Git Integration for Jira Data Center and Jira Server experience. Do more in Git without leaving Jira, reducing context switching for a better workflow. Start using Git Integration for Jira free today! Start Free Trial.

FinOps Tools: Supercharge Your Investment with Optimization

Cost analysis and allocation tools like CloudHealth, CloudCheckr, and Cloudability play an important role in many organizations’ FinOps journeys by assisting with keeping Finance informed, enabling forecasting, and driving accountability. These tools may also help provide visibility and direction around long-term purchases like Savings Plans and RIs. But, slicing and dicing your cloud costs is only the tip of the FinOps iceberg: 85%+ of your cloud savings potential lies beyond refining how you buy cloud services. You also need to optimize what you’re actually purchasing.

Log4shell fix with the Bitbucket Cloud and Snyk integration

By now, you’re probably assessing your level of exposure — or are in the middle of remediating — the recently disclosed vulnerability known as Log4Shell. We recently introduced a native integration with Snyk, a leading provider of developer security solutions, to help you address zero-day vulnerabilities. Once enabled, Snyk scans your code and its dependencies, and alerts you about security vulnerabilities, including Log4j. All current versions of Log4j 2 up to 2.14.1 are vulnerable.

Build and deploy an ASP.NET Core application to Azure

Automating the deployment of a new web application and the release of feature updates goes a long way towards improving the productivity and efficiency of your development team. Another benefit of automation is that it minimizes or even eliminates repeated manual deployments. Manual deployments introduce the risk of human error during this critical part of the development process.

Breaking down complex projects into smaller, shippable increments

Building a complex new product can be scary. What if no-one gets value from it? What if it doesn't work? What if it's hard to change? One way to mitigate these risks is to break down the product into smaller shippable increments, allowing you to capture feedback early and confirming the most important assumptions before fully committing to a solution.

Gartner IT IOCS Highlights: How Accenture Powers Automation Through Observability and StackState's 4T Data Model

Accenture’s vision for value-led, business-aligned operations applies Machine Learning, Automation and Observability to help cloud-hosted and on-premise systems diagnose and heal themselves. The company’s ubiquitous myWizard® platform, used by 100,000+ practitioners at more than 3000 companies, applies StackState’s advanced 4T Observability data model to improve service to Accenture’s customers.

Canonical teams with Xilinx to accelerate the development of adaptive SoCs

December 14, 2021: Canonical and Xilinx Inc. announced today the publication of Ubuntu images optimised for Xilinx Zynq UltraScale+ evaluation boards and the production-ready Kria System-on-Modules (SOM). The companies are collaborating to bring enterprise-grade Linux to the world of adaptive SoCs to accelerate the development of new software-defined devices across all IoT verticals.