Operations | Monitoring | ITSM | DevOps | Cloud

Last Thursday, a researcher from the Alibaba Cloud Security Team dropped a zero-day remote code execution exploit on Twitter, targeting the extremely popular log4j logging framework for Java (specifically, the 2.x branch called Log4j2). The vulnerability was originally discovered and reported to Apache by the Alibaba cloud security team on November 24th. MITRE assigned CVE-2021-44228 to this vulnerability, which has since been dubbed Log4Shell by security researchers.

Modern applications come in a variety of forms–monoliths, microservices, serverless functions, and containers to name a few–but at the heart of all of these are processes. Processes are the fundamental unit of execution that we use to run programs, and although we need processes to run our applications, software engineers rarely think about them.

This post will be updated over the next several days. Recently, a Remote Code Execution vulnerability was discovered in the Apache Log4J library. This vulnerability, which is tracked in CVE-2021-44228, dubbed Log4Shell, allows attackers to execute arbitrary code on affected systems. While HAProxy Enterprise, HAProxy ALOHA, and other products within the HAProxy Technologies portfolio are not impacted by this (they do not use the Log4J library at all), you can use them to block the attack.

With all the hustle and bustle of hospitals, hard-working staff, and extensive cutting-edge equipment, we often forget about the invisible infrastructure that underpins our healthcare institutions. They all rely on the backbone of databases, and quick access to the data housed within them, to ensure systems at the front-end run seamlessly.

We’re excited to share what’s new and improved in the v8.2 release of GitKraken Client. Even solo superheroes will benefit from Workspaces but we’ve made a lot of updates designed for Teams to get the most out of Git. So assemble your team and get ready to tackle even the largest projects in Git. Keep reading this article or watch the video below to see what’s new! We just can’t stop improving productivity with Git.

As 2021 draws to a close and all the industry commentators make their predictions for the coming year - the continued and dizzying growth of cloud services is high on the agenda. In this blog, we take a deeper look at how businesses are utilising the cloud and what impact this is having on global IT spend…

In a recent blog post, I introduced the tech stack our Mattermost Technical Writing team uses every day to build, contribute to, improve, and maintain the Mattermost product documentation at docs.mattermost.com. Building on this knowledge, I’d like to share more about how we work as a writing team, the branching strategies we’ve learned to adopt, and the review workflows every documentation contribution goes through before being merged into the codebase.

Heroku is a cloud-based platform that helps companies build, deliver, monitor, and scale applications with high velocity. Heroku's popularity is due to its simplicity, usability, elegance, and focus on the developer experience. Developers find Heroku helpful as they can get their application ready and running with only minimal focus on configuring infrastructure. Heroku scores on easiness in architecting apps, deploying them to flexible cloud infrastructure, and scaling them as required.