DevOps

OpenTofu, the community fork of Terraform born from HashiCorp’s license change, is rapidly building momentum under the Linux Foundation.

CVE-2023-44487 exploits a fundamental aspect of HTTP/2 to enable record-breaking DDoS attacks. Here’s what you need to know and do.

HashiCorp’s switch to the Business Source License has triggered a community fork of Terraform called OpenTofu, and the implications for infrastructure-as-code are enormous.

HashiCorp’s decision to relicense Terraform and other products under the Business Source License has sent shockwaves through the infrastructure community.

The MOVEit Transfer vulnerability has now impacted hundreds of organizations worldwide — a stark reminder that managed file transfer tools remain critical and under-secured attack surfaces.

Microsoft Build 2023 reveals the ‘Copilot Stack’ — a layered architecture that shows how Microsoft plans to embed AI into every developer workflow.

GitHub announces Copilot X with GPT-4 integration, chat, voice, pull request summaries, and docs — here’s what developers should actually expect.

The Biden administration’s new cybersecurity strategy shifts liability toward software vendors, and developers need to pay attention.

A massive ransomware campaign is exploiting a two-year-old VMware ESXi vulnerability, and the scale of unpatched systems is alarming.

CircleCI discloses a security incident and urges all customers to immediately rotate secrets stored in the platform. A reminder of the risks in our CI/CD supply chain.

Kubernetes 1.26 ‘Electrifying’ arrives with significant improvements to storage, scheduling, and the ongoing effort to remove legacy code.

AWS re:Invent 2022 kicks off with a clear message: the cloud giant is moving beyond primitives and toward opinionated, integrated solutions.