DevOps

DevOps describes the creation of cross-functional IT teams, containing developers and operations staff, who are encouraged to closely collaborate on software development and infrastructure management tasks to speed up deployment cycles. DevOps is associated with the use of cloud, containers and microservices technologies, and helps organisations to continuously deliver product updates and code changes into production environments.

News 22 Sep 2023
How ready does the world need to be for the quantum era?

Great use cases may exist for quantum computing, but no one knows for sure how long they will need to wait for a production-ready machine Continue Reading
News 21 Sep 2023
Cisco snaps up Splunk in $28bn application observability deal

The acquisition builds out Cisco’s observability portfolio, with AI-based full-stack observability for hybrid cloud environments Continue Reading

News 19 Sep 2023

38TB Microsoft data leak highlights risks of oversharing

An accidentally disclosed SAS token with excessive privileges enabled researchers to access nearly 40TB of Microsoft’s data, highlighting the risks of privilege mismanagement and oversharing Continue Reading
News 13 Sep 2023

GitHub fixes race condition that could have led to ‘repojacking’

A subtle flaw in how GitHub handled repository creation and user renaming could have had serious consequences for the open source community, but has now been fixed. Learn more about how it worked Continue Reading
News 11 Sep 2023

Salesforce and Zoom embrace ethical hackers. You should, too

Software companies Salesforce and Zoom discuss their successful bug bounty programmes, what they learned at a recent in-person hackathon in which they participated, and why others shouldn’t be scared of hackers Continue Reading
News 07 Sep 2023

Mainframe remains a positive force among IT leaders

BMC’s annual survey of mainframe users finds there is continued demand, but some are concerned over DevOps tooling Continue Reading
News 05 Sep 2023

Researchers find flaw in Mend.io security platform

WithSecure’s research team uncovered an authentication flaw in an application security platform developed by Mend.io, which has now been fixed Continue Reading
Podcast 01 Sep 2023

Digital service: A Computer Weekly Downtime Upload podcast

We speak to Harmeen Mehta, chief digital innovation officer at BT, about service management in digital transformation Continue Reading
News 30 Aug 2023

NCSC warns over possible AI prompt injection attacks

The UK’s NCSC says it sees alarming potential for so-called prompt injection attacks driven by the large language models that power AI chatbots Continue Reading
News 21 Aug 2023

Red Hat CEO on AI moves and source code kerfuffle

Matt Hicks talks up Red Hat’s efforts to support generative AI adoption through OpenShift AI and weighs in on the issues surrounding the company’s decision to limit access to RHEL source code Continue Reading
News 04 Aug 2023

Biden’s SBOM mandate a ‘shot heard around the world’, report says

Two years and three months after Joe Biden mandated new standards in supply chain security, over 40% of UK respondents to a survey say they have implemented new SBOM policies in direct response Continue Reading
News 31 Jul 2023

SUSE takes aim at Red Hat in Linux, Kubernetes play

SUSE CEO Dirk-Peter van Leeuwen outlines strategy to capture the Kubernetes opportunity and offer enterprises an alternative to RHEL following Red Hat’s decision to limit access to RHEL source code Continue Reading
News 18 Jul 2023

Critical Adobe ColdFusion flaws chained in ongoing cyber attacks

Two vulnerabilities in Adobe ColdFusion have been chained by threat actors to target victim systems, apparently after one of them was accidentally disclosed Continue Reading
News 10 Jul 2023

How Confluent is maintaining its edge in event streaming

Confluent co-founder Jun Rao talks up the company’s business and how it competes with hyperscalers and other suppliers of managed Kafka services Continue Reading
News 20 Jun 2023

EDF deploys Dynatrace to fuel site reliability engineering drive

The energy company has adopted the observability platform to support in-house software development Continue Reading
Opinion 01 Jun 2023

Generative AI – the next biggest cyber security threat?

Following the launch of ChatGPT in November 2022, several reports have emerged that seek to determine the impact of generative AI in cyber security. Undeniably, generative AI in cyber security is a double-edged sword, but will the paradigm shift in favour of opportunity or risk? Continue Reading
Opinion 31 May 2023

Security Think Tank: A brief history of (secure) coding

From controlling who was allowed to work with IBM mainframes to present-day DevSecOps techniques, the concept of secure coding has a longer history than you might think Continue Reading
Opinion 26 May 2023

Security Think Tank: Why “secure coding” is neither

Ensuring the security of code is just one element of a complex software lifecycle and risk management process that people need to think about more holistically, says Ed Moyle Continue Reading
News 18 May 2023

Inside MLC Life Insurance’s cloud journey

The Australian insurer spent a fair amount of time addressing people-related challenges in its move to cloud, which has improved its security posture and reduced infrastructure spending, among other outcomes Continue Reading
News 16 May 2023

CW Innovation Awards: How Singapore's DBS Bank is driving IT automation

DBS Bank’s Technology Marketplace portal has enabled the bank to speed up provisioning of infrastructure and applications through automation and improve developer productivity Continue Reading
Opinion 15 May 2023

Security Think Tank: To secure code effectively, verify at every step

Verification at every step is an important part of ensuring your code is secure, writes Petra Wenham Continue Reading
Feature 15 May 2023

Automation: The key to FinOps success

Workload management and automation offers a way for FinOps teams to match supply to demand for cloud-based IT in an efficient way Continue Reading
Opinion 12 May 2023

What secure coding practices mean to modern cyber security

Joseph Foote of PA Consulting explores how we know the services we use most are protected, what we mean when we say 'secure coding practices', and what happens when secure coding practices are not followed? Continue Reading
News 02 May 2023

IT Priorities 2023: Software development

Organisations are investing in technology-led business initiatives to tackle the economic slowdown Continue Reading
News 25 Apr 2023

Veritas shows off software SAN for Kubernetes at KubeCON 2023

Veritas InfoScale aims to provide high-performance block access storage despite limitations such as a maximum node count of 16 per cluster Continue Reading
News 18 Apr 2023

IT Priorities 2023: Cloud and disaster recovery top storage and backup plans

Cloud storage still the biggest project planned in data storage in 2023, with disaster recovery the most important area in data protection cited by TechTarget/Computer Weekly survey respondents Continue Reading
News 18 Apr 2023

Focus on these three risky behaviours to boost cloud security

Some 80% of cloud security alerts are triggered by just 5% of security rules. Security teams can substantially improve their resilience by zeroing in on a small set of risky behaviours, according to a report Continue Reading
News 13 Apr 2023

How Agoda is shaping up to be a technology powerhouse

Agoda’s CTO Idan Zalzberg explains why the online travel agency with a massive technology footprint prefers to run things in-house and not rely too much on public cloud services Continue Reading
News 28 Mar 2023

BNP Paribas moves to Swedish datacentre in high-performance computing strategy

BNP Paribas is moving data-intensive workloads to a Swedish datacentre to increase capacity while reducing its carbon footprint Continue Reading
News 20 Mar 2023

Inside AIA’s cloud adoption journey

The Hong Kong-based multinational insurance firm has moved 86% of its IT infrastructure to public cloud to drive growth, productivity and efficiency Continue Reading
Podcast 10 Mar 2023

Podcast: Why DBaaS and what problems does it solve?

We talk to Tobias Ternström of Nutanix about how the enterprise landscape has seen thousands of databases from multiple vendors mushroom and how database as a service can help manage that complexity Continue Reading
News 09 Mar 2023

Velero wants to become the Kubernetes backup standard

Open source Velero offers modular data protection and disaster recovery functionality via API for Kubernetes container clusters in an effort to become the standard in the field Continue Reading
Feature 01 Mar 2023

Backup testing: The why, what, when and how

We look at backup testing – why you should do it, what you should do, when you should do it, and how, with a view to the ways in which it will be made easier by forthcoming developments in backup software Continue Reading
News 28 Feb 2023

LastPass attack saw employee’s home computer hacked

The ongoing investigation into a series of linked security incidents at LastPass has found that the attacker was successfully able to compromise a developer’s home PC using a vulnerability in a media software package Continue Reading
News 14 Feb 2023

OSC&R framework to stop supply chain attacks in the wild

The backers of a new MITRE ATT&CK style framework called OSC&R hope to help organisations get to grips with threats to their software supply chains Continue Reading
News 08 Feb 2023

Rakuten targets big edge deployments with Symworld Cloud

Japanese giant Rakuten bought Kubernetes management platform Robin.io and put it in 50,000-plus telco antennas. Now it aims Symworld Cloud at enterprise edge deployments Continue Reading
Feature 07 Feb 2023

Container storage platforms: Big six approach starts to align

Container storage is a complex but vital task. We survey the big six storage makers and see methods are starting to align around management platforms Continue Reading
News 25 Jan 2023

State of DevOps: Success happens through platform engineering

The annual State of DevOps report has focused on a phenomenon known as platform engineering Continue Reading
E-Zine 24 Jan 2023

BBC under scrutiny over its digital strategy

In this week’s Computer Weekly, the BBC faces in-depth scrutiny over its digital plans – we take a look at progress. Do you need to keep data forever? We examine the technologies behind infinite storage. And we find out about the digital transformation challenges in vehicle dealerships. Read the issue now. Continue Reading
News 23 Jan 2023

Trellix automates patching for 62,000 vulnerable open source projects

Since revealing startling statistics about the prevalence of a 15-year-old Python vulnerability, Trellix says it has helped fix almost 62,000 vulnerable projects in the past four months Continue Reading
News 09 Jan 2023

How to identify a strategic technology platform

A strategic platform has to be broad enough to support a range of business functions while being open, extensible and modular at the same time, according to Forrester Continue Reading
News 05 Jan 2023

Cyber gang abused free trials to exploit public cloud CPU resources

A South Africa-based cyber crime gang exploited free trials and introductory offers to run cryptominers via public cloud services, then did a runner without paying Continue Reading
News 05 Jan 2023

Executive interview: Rajesh Naidu, Expedia

We speak to Expedia’s head of IT architecture about what a modern, scalable architecture for the cloud should look like Continue Reading
News 27 Dec 2022

Top 10 ASEAN IT stories of 2022

Despite the challenges over the past year, ASEAN businesses have taken things in stride as they press on with digital transformation, whether it is empowering citizen developers or building cloud-native applications Continue Reading
News 20 Dec 2022

Top 10 emerging storage trends stories of 2022

There’s a seismic shift to the cloud. In its wake, object storage, unstructured data, analytics, unified file and object, and consumption models of procurement have all been boosted Continue Reading
News 19 Dec 2022

GitHub CEO: Artificial intelligence will not replace developers

Artificial intelligence will enable developers to learn at their own pace and become more productive rather than take over their jobs, says GitHub CEO Thomas Dohmke Continue Reading
News 05 Dec 2022

How HashiCorp is driving cloud provisioning and management

HashiCorp CEO Dave McJannet talks up how the company is supporting cloud provisioning in a hybrid environment and its investments in Asia-Pacific to capitalise on the region’s growth potential Continue Reading
News 22 Nov 2022

Pure aims at near bare metal I/O with Portworx PX-Fast

PX-Fast is driven by customer need for scale and high performance in containerised environments and sees reworking of Portworx data architecture to slash storage access time Continue Reading
E-Zine 10 Nov 2022

CW Benelux: Heineken finds the right brew for digital

Heineken’s data management director has revealed some of the ways the company is using information technology to transform digitally. Also read how a PhD student in the Netherlands is detecting hidden messages on the internet by exploring the practice of steganography. Continue Reading
News 03 Nov 2022

Why technology change is slow at larger firms

Firms that commit to a single cloud provider and a lack of investment in improving developer productivity can drive up costs and slow down the pace of change, technology leaders say Continue Reading
News 02 Nov 2022

OpenSSL vulnerabilities ‘not as bad as feared’

As previously trailed, OpenSSL patched two buffer overflow vulnerabilities, neither of them as impactful as had been feared Continue Reading
E-Zine 01 Nov 2022

How the pandemic accelerated tech adoption in hospitality

In this week’s Computer Weekly, we look at how the hospitality sector is turning to technology to rebuild after it was devastated by the pandemic. Google’s cloud business is growing but remains well behind the market leaders – what does its future look like? And we look at the benefits of AIOps for storage. Read the issue now. Continue Reading
News 31 Oct 2022

Prepare today for potentially high-impact OpenSSL bug

OpenSSL trailed a critical vulnerability patch last week, which will be only the second such flaw ever found in the open source encryption project. Unfortunately, the first was Heartbleed Continue Reading
Opinion 28 Oct 2022

How has container security changed since 2020, and have we taken it too far?

While containers are now one of the most popular ways to deploy applications, it is fair to say that the adoption and implementation of security best practice to govern their use has not kept up Continue Reading
News 18 Oct 2022

Virtually all vulnerable open source downloads are avoidable

Some 96% of known vulnerable open source downloads could have been avoided altogether, according to a report Continue Reading
News 10 Oct 2022

How Cloudflare is staying ahead of the curve

Cloudflare co-founder and CEO Matthew Prince talks up what has changed since the company’s first business plan was written in 2009 and how it keeps pace with the fast-moving network security landscape Continue Reading
Opinion 10 Oct 2022

Security Think Tank: Design security in to reap container benefits

Provided container security basics are built into your development and runtime environment from the start, containerised services and applications can provide rapid – and secure – achievement of business objectives Continue Reading
News 04 Oct 2022

Red Hat CEO on OpenShift roadmap, competitive play

Red Hat’s newly minted CEO Matt Hicks talks up OpenShift’s roadmap, the competition with VMware and opportunities in the Asia-Pacific region Continue Reading
News 30 Sep 2022

How Endowus is leveraging Kafka and microservices

The Singapore-based financial technology company built a distributed microservices architecture to ensure its investment platform remains resilient at all times Continue Reading
Opinion 28 Sep 2022

Security Think Tank: Three steps to a solid DevSecOps strategy

Read about how buyers can manage third-party risk when procuring applications, how to secure the software development process, and even how to affect cultural change among developers not used to thinking cyber first Continue Reading
News 26 Sep 2022

How AWS is tapping the groundswell in cloud adoption

Phil Davis, managing director of Amazon Web Services in Asia-Pacific and Japan, talks up the company’s growth strategy and how it is retaining customers amid rivals nipping at its heels Continue Reading
Opinion 23 Sep 2022

It’s time for engineering teams to own DevSecOps

It may seem counterintuitive, but maybe organisations should consider delegating responsibility for DevSecOps to engineering teams, not security teams, argues Elastic’s Mandy Andress Continue Reading
News 23 Sep 2022

How Great Eastern is transforming its IT organisation

Singapore-based insurer Great Eastern made painstaking efforts to rid itself of legacy systems and transformed its IT organisation to become nimbler by building up its cloud and DevOps capabilities Continue Reading
News 22 Sep 2022

Dr Martens goes feetfirst into cloud-to-cloud backup

Iconic bootmaker laces up for a strategy to move all applications to the cloud, beginning with cloud-to-cloud backup for Microsoft 365 apps plus on-site VMware operations Continue Reading
News 16 Sep 2022

How an architecture graduate became a coder

Back-end engineer Yang Lyu couldn’t find a job as an architect after graduation and ended up as a software developer after discovering her flair for coding Continue Reading
News 12 Sep 2022

CISOs should spend on critical apps, cloud, zero-trust, in 2023

Faced with a global recession next year, security buyers should try to direct investment towards technology that protects customer-facing and revenue-generating workloads, say analysts Continue Reading
Opinion 09 Sep 2022

Security Think Tank: Adding trust to AppSec and DevSecOps

When building in trust and assurance into app development through standards, it is critically important not to stifle innovation Continue Reading
Opinion 08 Sep 2022

Security Think Tank: Creating a DevSecOps-friendly cyber strategy

When slowing down is not an option, you need to find a security strategy that is DevSecOps friendly, says Airbus Protect’s Olivier Allaire Continue Reading
Opinion 07 Sep 2022

Security Think Tank: The many dimensions of DevSecOps

It is imperative to make our colleagues and customers know that when we talk DevSecOps, we are facing a multiphase challenge that starts at the very beginning of DevOps, and one that never ends Continue Reading
News 05 Sep 2022

VMware doubles down on cloud in ASEAN

Paul Simos, VMware’s managing director and vice-president for Southeast Asia and Korea, dives deeper into the company’s cloud strategy for the region Continue Reading
Opinion 02 Sep 2022

Security Think Tank: Shift left, shift right. What about shift everywhere?

The concepts of shift left and shift right are highly effective in securing the development process, but for those who want to take things that step further there is shift everywhere Continue Reading
Opinion 01 Sep 2022

Security Think Tank: Effective DevSecOps requires collaboration

Application security and effective DevSecOps can only be achieved through collaboration with the business – the ultimate goal is to make it safer to do business, which requires considering integrated risk management and identity and access management alongside cyber security and application security Continue Reading
News 31 Aug 2022

VMware CEO: Broadcom acquisition is on track

Raghu Raghuram claims VMware customers are getting more comfortable with the Broadcom acquisition while employees are ‘more or less focused’ on the job at hand Continue Reading
News 30 Aug 2022

VMware beefs up Tanzu portfolio, adds OpenShift support

The Tanzu Application Platform will include support for Red Hat OpenShift, air-gapped installations and other capabilities to improve developer productivity and code security Continue Reading
News 30 Aug 2022

LastPass breach limited in scale and well-managed, say experts

A breach of LastPass’s developer environment does not seem to have affected users of the password management service, but it may still be time for a credential reset Continue Reading
Podcast 25 Aug 2022

James Hatch, BAE Systems: Computer Weekly Downtime Upload podcast

We speak to the chief digital officer at BAE Systems’ Digital Intelligence business about the challenges of “digital” in high-trust organisations Continue Reading
News 23 Aug 2022

DevSecOps: Software developers lack sufficient security focus

GitLab survey shows developers want to produce high-quality code, but ‘shifting’ security left is hard to achieve Continue Reading
Feature 08 Aug 2022

Icelandic datacentres may lead the way to green IT

Iceland may soon become even more attractive to companies wanting to minimise their carbon footprint while using high-performance computing services Continue Reading
News 08 Aug 2022

Internet giants in favour as Ireland tightens rules on datacentres

Irish premier Michael Martin has insisted its temporary squeeze on datacentre construction is not a moratorium on the industry Continue Reading
News 05 Aug 2022

Inside Bukalapak’s cloud strategy

Indonesian e-commerce unicorn Bukalapak’s multicloud strategy, underpinned by the use of microservices and DevOps, has enabled it to meet the diverse needs of its users while addressing business requirements Continue Reading
News 02 Aug 2022

VMware CEO defends Broadcom deal

Raghu Raghuram is confident that Broadcom will invest in growing VMware through a broad portfolio of assets that will serve its entire customer base, not just its biggest customers Continue Reading
News 29 Jul 2022

How TCS is supporting Australia’s electricity market settlement

Tata Consultancy Services worked with the Australian Energy Market Operator to build a new system that speeds up electricity market settlement Continue Reading
E-Zine 12 Jul 2022

UKtech50 2022: The most influential people in UK technology

In this week’s Computer Weekly, we reveal the 50 most influential people in UK IT for 2022, and talk to the winner of the 12th annual UKtech50, National Cyber Security Centre CEO Lindy Cameron. Also, we take an in-depth look at the crisis in chip supply and what’s needed to solve it. Read the issue now. Continue Reading
Opinion 07 Jul 2022

The evolution of threat modelling as a DevSecOps practice

Threat modelling is becoming ever more integrated into software architecture design. Here, Stephen de Vries of IriusRisk looks at the evolution of the process Continue Reading
News 29 Jun 2022

Inside Bendigo and Adelaide Bank’s cloud journey

With a strong DevOps culture, Australian bank has been moving its most important applications to the cloud in a journey that has already reaped returns Continue Reading
News 24 Jun 2022

Developers grapple with open source software security

Software developers are taking longer to fix vulnerabilities and many do not know about the dependencies of open source software components they are using, study finds Continue Reading
Podcast 21 Jun 2022

Podcast: The legacy and modern apps that drive object storage

We talk to object (and file) storage vendor Scality about the ways the application and development environment is changing and how that is driving object storage Continue Reading
E-Zine 09 Jun 2022

CW Europe: Russia escalates cyber war on Ukraine

Microsoft has given details of cyber attacks on Ukrainian civilian communications, nuclear safety authorities, and the exploitation of the destruction of Mariupol in a phishing campaign. Also read about a report on the European Artificial Intelligence Act that suggests a limited ban on predictive policing systems. Continue Reading
News 23 May 2022

How Ivanti views patch management with a security lens

Bringing development, operations and security teams together will help organisations to improve their visibility of IT assets and vulnerabilities while keeping threat actors at bay Continue Reading
News 10 May 2022

NetApp’s cloud-era storage competitors in ‘world of hurt’

NetApp is busily reinventing itself as a cloud services provider, with its competition years behind, according to its public cloud vice-president Continue Reading
News 20 Apr 2022

How PropertyGuru is approaching technology integration

Property tech firm PropertyGuru has invested in capabilities such as DevOps and authentication that can be applied across different platforms that it has acquired over time Continue Reading
News 13 Apr 2022

More ANZ organisations warm to DevSecOps

About four in 10 organisations in Australia and New Zealand are undertaking the transition to development, security and operations, while a further 36% plan to do so in 2022, study finds Continue Reading
E-Zine 12 Apr 2022

Disney combines digital, data and creativity to win advertising opportunities

In this week’s Computer Weekly, we talk to the executive vice-president for client and brand solutions at Disney Advertising Sales about how it is using data to subserve story-telling excellence. We delve into how rising energy costs negatively impacted the UK arm of Sungard Availability Services. And we look at the role of infrastructure as code in edge datacentres. Read the issue now. Continue Reading
News 08 Apr 2022

Was Spring4Shell a lot of hot air? No, but...

Find out why Spring4Shell was apparently not as impactful a security problem as many had at first feared, and why it’s on the cyber community as a whole to do better Continue Reading
E-Zine 07 Apr 2022

CW Middle East: UAE and UK researchers work on ‘trustworthy’ cloud OS for datacentres

Imperial College London is embarking on a three-year project with an Abu Dhabi-based group of researchers to find ways for datacentre operators and cloud providers to secure their infrastructure. Also read how Dubai is positioning itself to reap the benefits of a promising global market for drone technology. Continue Reading
E-Zine 05 Apr 2022

Police use of AI needs overhaul to prevent abuse

In this week’s Computer Weekly, a House of Lords inquiry calls for a rethink on how police forces use AI technologies – we examine the issues. Our new buyer’s guide looks into edge datacentres. And the EU and US agree a new data protection deal to replace Privacy Shield, but will it stand up to scrutiny? Read the issue now. Continue Reading
News 04 Apr 2022

Environmental campaigners halt Meta datacentre construction in the Netherlands

Datacentre being built to serve ‘metaverse’ worlds would consume nearly half as much energy as all other datacentres in the country Continue Reading
News 31 Mar 2022

Spring4Shell zero-day sprung on security teams

Some are describing a newly disclosed Spring Java framework vulnerability as the next Log4Shell, but what is Spring4Shell, and what can we do about it? Continue Reading
News 10 Mar 2022

BT signs five-year deal with Google Cloud to revamp customer experience

BT is teaming up with Google Cloud so it can tap into its portfolio of data analytics and artificial intelligence services, and revamp its customer experience Continue Reading
News 16 Feb 2022

Cloud Security Alliance publishes guidelines to bridge compliance and DevOps

The Cloud Security Alliance has published a report detailing practices that organisations can adopt to bridge the gap between compliance and software development and operations Continue Reading
E-Zine 10 Feb 2022

CW Benelux: Unesco members adopt AI ethics recommendation

Unesco member state have adopted an AI ethics recommendation that seeks to define a common set of values and principles to guide the development of ethical AI globally. Also read about a large-scale national cyber exercise in the Netherlands, and the Estonian government’s Siri-like digital assistant. Continue Reading
News 10 Feb 2022

Half of key IT spending to shift to cloud

Some 51% of spending in key areas such as application software, infrastructure software, business process services and system infrastructure will shift to cloud by 2025, says Gartner Continue Reading