Progress announced the early-access release of Progress® MarkLogic® Server 12.
A competitive edge in today's on-demand, software-first economy can be quantified in terms of weeks, days, or even hours. Quickness prevails. In order to have a competitive edge, companies today must innovate and move fast, and in high-pressure times, security and developer teams need to work together quickly and efficiently to protect their organizations.
The field of cloud native development is rapidly evolving, but during this shift to modern environments such as Kubernetes, many DevOps teams are putting security on the back burner in a rush to move to cloud native environments. This is opening the door to a wide array of new security risks and numerous opportunities for unscrupulous cybercriminals — and machine identities are a prime example of this. The number of machine identities used by organizations has continued to increase year over year, creating an ever-growing security risk that cybercriminals are looking to exploit.
According to a 2023 Venafi survey, 84% of security and IT leaders anticipate that Kubernetes will soon be the primary platform used to construct all applications as cloud native development is becoming increasingly popular and Kubernetes has become the de facto norm. However, 75% think that the speed and complexity of cloud native development introduce new security blind spots.
The actual move to cloud native environments comes with its own set of challenges and risks, and many development teams fail to take the time to properly and safely transition their data and applications. While 87% of security and IT leaders have started to move legacy applications to the cloud, many did not optimize for cloud native. More than half (53%) simply did a lift and shift to the cloud with most application code remaining the same.
Developers are more likely to prioritize speed above security when given the option, with 68% of security and IT leaders concerned that developers may not always utilize certificates since issuing them causes additional friction in development processes. Since code signing slows down development, over half (47%) of security and IT officials acknowledge they do not require it for artifacts.
So what role does machine identity management play in the rapid corporate transition to a cloud native environment? Machine identities are the cornerstone of cloud native security since they secure all connections and facilitate authentication and authorization for workloads within and across clusters. However, if machine identities are not readily accessible throughout the development process, developers could be tempted to circumvent the proper use of machine identities by taking security shortcuts and creating workarounds. This can often lead to security teams not having the right visibility into how machine identities are fulfilled, potentially risking CA compromise especially when workloads are signed with a CA that is bootstrapped without proper controls and governance.
Among security and IT leaders, 88% believe that machine identity management is key to the success of zero trust models, but 74% of security and IT leaders worry that developers are challenged with several conflicting priorities — meaning security is not always top of mind. To address this challenge, developer teams need to work together with security teams to make security a priority. Key to this is managing all machine identities across their org — which can only be done effectively through the two teams working together.
Machine identities are paramount to securing cloud native resources and sensitive microservices that are accessible from anywhere on the Internet. Organizations must identify a wide array of cloud native machines, such as containers, microservices, DevOps artifacts, API connections, and more, to properly implement the newest technological advancements. All these networked cloud native computers need to be able to quickly authenticate themselves to one another to function securely. Balancing security and the need to keep up with the rapid pace of innovation today is critical to ensuring that organizations do not become vulnerable to a growing number of cybersecurity threats.
Industry News
Red Hat announced the general availability of Red Hat Enterprise Linux (RHEL) AI across the hybrid cloud.
Jitterbit announced its unified AI-infused, low-code Harmony platform.
Akuity announced the launch of KubeVision, a feature within the Akuity Platform.
Couchbase announced Capella Free Tier, a free developer environment designed to empower developers to evaluate and explore products and test new features without time constraints.
Amazon Web Services, Inc. (AWS), an Amazon.com, Inc. company, announced the general availability of AWS Parallel Computing Service, a new managed service that helps customers easily set up and manage high performance computing (HPC) clusters so they can run scientific and engineering workloads at virtually any scale on AWS.
Dell Technologies and Red Hat are bringing Red Hat Enterprise Linux AI (RHEL AI), a foundation model platform built on an AI-optimized operating system that enables users to more seamlessly develop, test and deploy artificial intelligence (AI) and generative AI (gen AI) models, to Dell PowerEdge servers.
Couchbase announced that Couchbase Mobile is generally available with vector search, which makes it possible for customers to offer similarity and hybrid search in their applications on mobile and at the edge.
Seekr announced the launch of SeekrFlow as a complete end-to-end AI platform for training, validating, deploying, and scaling trusted enterprise AI applications through an intuitive and simple to use web user interface (UI).
Check Point® Software Technologies Ltd. unveiled its innovative Portal designed for both managed security service providers (MSSPs) and distributors.
Couchbase officially launched Capella™ Columnar on AWS, which helps organizations streamline the development of adaptive applications by enabling real-time data analysis alongside operational workloads within a single database platform.
Mend.io unveiled the Mend AppSec Platform, a solution designed to help businesses transform application security programs into proactive programs that reduce application risk.
Elastic announced that it is adding the GNU Affero General Public License v3 (AGPL) as an option for users to license the free part of the Elasticsearch and Kibana source code that is available under Server Side Public License 1.0 (SSPL 1.0) and Elastic License 2.0 (ELv2).
Progress announced the latest release of Progress® Semaphore™, its metadata management and semantic AI platform.
Elastic, the Search AI Company, announced the Elasticsearch Open Inference API now integrates with Anthropic, providing developers with seamless access to Anthropic’s Claude, including Claude 3.5 Sonnet, Claude 3 Haiku and Claude 3 Opus, directly from their Anthropic account.