Uchungechunge Lokunikezwa Kwesofthiwe

Isingeniso I-Orca Security isanda kukhomba iphutha lokuklama kusevisi ye-Google Cloud Build, ebizwa ngokuthi "Bad.Build." Leli phutha libeka ingozi enkulu yokuphepha njengoba livumela abahlaseli ukuthi basebenzise i-Privilege Escalation, libanike ukungena okungagunyaziwe ezindaweni zokugcina amakhodi ze-Artifact Registry ye-Google. Imiphumela yalokhu kusengozini iyanda...

Esimweni sedijithali sanamuhla, ukuphepha kwezinhlelo zokusebenza zesofthiwe sekuyinkinga enkulu ezinhlanganweni kuzo zonke izimboni. Eqinisweni, ngokusho kocwaningo lwamazwe ngamazwe phakathi kwabathuthukisi emhlabeni wonke, ama-62% abo abonisa ukuthi izinhlangano zabo zihlola ngenkuthalo amacala okusetshenziswa noma zinezinhlelo zokusebenzisa i-DevSecOps. Ukuqalisa ukusebenza okuqinile,...