Monte Zweben, Roland Meertens discuss the challenges in building, maintaining, and operating machine learning models. By Monte Zweben, Roland Meertens Monte Zweben, Roland Meertens discuss the challenges in building, maintaining, and operating machine learning models. By Monte Zweben, Roland MeertensRead More
Veracode Report Shows Signs of Progress in Securing Software Supply Chain
Veracode’s recently released State of Software Security report found a general decline in the number of known security vulnerabilities found in third-party libraries along with a trend towards smaller applications being scanned more regularly for issues. It also finds that the industry still has a long way to go. By Andrew Davis Veracode’s recently released State of Software Security report found a general decline in the number of known security vulnerabilities found in third-party libraries along with a trend towards smaller applications being scanned more regularly for issues. It also finds that the industry still has a long way to go. By Andrew DavisRead More
RDS and Aurora PostgreSQL Vulnerability Leads to AWS Deprecating Many Minor Versions
A researcher at the security company Lightspin recently explained how she obtained credentials to an internal AWS service using a PostgreSQL extension and exploiting a local file read vulnerability on RDS. AWS confirmed the issue and deprecated dozens of minor versions of Amazon Aurora and RDS for PostgreSQL. By Renato Losio A researcher at the security company Lightspin recently explained how she obtained credentials to an internal AWS service using a PostgreSQL extension and exploiting a local file read vulnerability on RDS. AWS confirmed the issue and deprecated dozens of minor versions of Amazon Aurora and RDS for PostgreSQL. By Renato LosioRead More
