Skip to main content

Malicious NPM Package Gets Downloaded 50K Times Before Discovery

A malicious package downloaded approximately 50,000 times from a node package manager (npm) is providing an object lesson for adopting more DevSecOps best practices. Security researchers from Tenable discovered a “ambar-src” package that was first published Feb. 13 and then updated again before being discovered. It is aimed at developers building JavaScript applications on Windows, […]

from DevOps.com https://ift.tt/nER8Gep

Comments

Popular posts from this blog

Practical Approaches to Long-Term Cloud-Native Security

There is no shortage of advice out there about how to secure modern, cloud-native workloads. By now, most developers and IT engineers who work with cloud-native deployments have heard all of the mantras about DevSecOps, shift-left security, multi-layer defenses and dynamic baselining (to name just some of the key concepts that are driving IT security […] The post Practical Approaches to Long-Term Cloud-Native Security appeared first on DevOps.com . from DevOps.com https://ift.tt/2PggVhj

DevOps Chat: Hybrid, Multi-Cloud Management for DevOps With CloudBolt

Agile, DevOps, multiple cloud providers, serverless, contemporary cloud native apps, shadow IT using a credit card–it can be daunting for any IT organization to be responsive to the internal customer needs. It’s even tougher to be proactive and get ahead of the curve. Enter Cloud Management Platforms (CMP). On this episode of DevOps Chat, we […] The post DevOps Chat: Hybrid, Multi-Cloud Management for DevOps With CloudBolt appeared first on DevOps.com . from DevOps.com https://ift.tt/2MRr45g

Container Security

The post Container Security appeared first on DevOps.com . from DevOps.com https://ift.tt/30DUGIh