Enterprise software developers continue to use flawed code in apps

Companies that develop enterprise applications download over 200,000 open-source components on average every year and one in every 16 of those components has security vulnerabilities.This is indicative of the poor state of the software supply chain, a problem that's only getting worse with the increased reliance on third-party code combined with bad software inventory practices.According to software development lifecycle firm Sonatype, third-party components account for 80 percent to 90 percent of the code found in a typical enterprise application today.The number of downloads from the largest largest public repository of open-source Java components reached 31 billion last year, a 82 percent increase over 2014, the company found.To read this article in full or to leave a comment, please click here

Enterprise software developers continue to use flawed code in apps

Companies that develop enterprise applications download over 200,000 open-source components on average every year and one in every 16 of those components has security vulnerabilities.This is indicative of the poor state of the software supply chain, a problem that's only getting worse with the increased reliance on third-party code combined with bad software inventory practices.According to software development lifecycle firm Sonatype, third-party components account for 80 percent to 90 percent of the code found in a typical enterprise application today.The number of downloads from the largest largest public repository of open-source Java components reached 31 billion last year, a 82 percent increase over 2014, the company found.To read this article in full or to leave a comment, please click here

OpenStack + VMware Light Board Series

Still confused on how VMware software works with OpenStack?  This lightboard series on VMware + OpenStack is just what you need.  From basic 101 level content to deeper dives discussing NSX integration, these videos will help you understand how VMware technologies can enhance and stabilize an OpenStack deployment.

If you are fairly new to the OpenStack and not new to VMware, I would suggest starting with these first three videos to help level set on OpenStack as a technology decision

If you want to get a more in-depth understanding of how vSphere, NSX, and vSphere datastores work in the context of OpenStack, here is the playlist

We’re working on quite a few more videos so if you have ideas for concepts you want to learn, please reach out to your VMware account team and they can forward on the request!

Also here are some more helpful resources to get you started on the path to deploying a VMware-based OpenStack Software-Defined Data Center:

Muggers used Pokemon Go to lure victims, police say

With the launch of Pokemon Go last week, it's not just players but police that "gotta catch 'em all."Police in O'Fallon, Missouri, believe muggers may have tracked or lured victims through the Pokemon Go mobile game, in which players follow their phones' directions to real-world places to "catch" Pokemon characters."The way we believe it was used is you can add a beacon to a Pokestop to lure more players. Apparently they were using the app to locate people standing around in the middle of a parking lot or whatever other location they were in," O'Fallon Police Department explained on its official Facebook page.To read this article in full or to leave a comment, please click here

Muggers used Pokemon Go to lure victims, police say

With the launch of Pokemon Go last week, it's not just players but police that "gotta catch 'em all."Police in O'Fallon, Missouri, believe muggers may have tracked or lured victims through the Pokemon Go mobile game, in which players follow their phones' directions to real-world places to "catch" Pokemon characters."The way we believe it was used is you can add a beacon to a Pokestop to lure more players. Apparently they were using the app to locate people standing around in the middle of a parking lot or whatever other location they were in," O'Fallon Police Department explained on its official Facebook page.To read this article in full or to leave a comment, please click here

With Minnesota shooting, power of live streaming takes center stage

Live streaming, a technology that has been around for years, became white hot this week after it was used to capture the aftermath of the fatal shooting of a black man by a police officer in Minnesota.Diamond Reynolds opened her Facebook Live app and live-streamed what happened after the shooting that left her boyfriend Philando Castile dead and a country in turmoil."Live streaming is quite different ... than what we've seen before," said Dan Olds, an analyst at Gabriel Consulting Group. "Skype and Facetime are most often used as one-to-one communication vehicles. But live-casting is different in that it gives users a one-to-many live broadcasting capability -- something that had only been available to broadcasting companies up until now."To read this article in full or to leave a comment, please click here

This mobile chip is faster than the one in Samsung’s Galaxy S7

A mobile chip faster than the one in flagship smartphones like Samsung's Galaxy S7 and LG's G5 will start appearing in handsets this quarter.The Snapdragon 821, announced by Qualcomm on Monday, is an incremental upgrade to the Snapdragon 820. In addition to mobile phones, it's also aimed at tablets, drones, robots and virtual reality headsets.The Snapdragon 821 is about 10 percent faster than its predecessor. It is also more power-efficient, meaning batteries in smartphones and phablets will last longer.Smartphone buyers can look at smartphone specifications to see if a device has a Snapdragon 821 or 820.Qualcomm is now the top dog of mobile chip companies, with Intel exiting the race. The company routinely releases incremental upgrades to its top-line chips. It released the Snapdragon 801 chip in 2014, with performance and graphics improvements, as an upgrade to the Snapdragon 800.To read this article in full or to leave a comment, please click here

Free data visualization with Microsoft Power BI: Your step-by-step guide

Microsoft has jumped into the free, self-service data analysis space with Power BI. Power BI offers basic data wrangling capabilities similar to Excel's Power Query. It also lets you create interactive visualizations, reports and dashboards with a few clicks or drag-and-drops; type natural-language questions about your data on a dashboard; and handle files that are too large for Excel. It can work with dozens of data types -- not only Excel, Access and CSV files, but also Salesforce, Google Analytics, MailChimp, GitHub, QuickBooks Online and dozens of others. And, it will run R scripts -- meaning that any data you can pull in and massage via R you can import into Power BI.To read this article in full or to leave a comment, please click here

Why you shouldn’t pay the ransomware fee

While most of the decision makers would likely prefer to hear a simple yes or no when asking if they should pay, nothing in security is simple. By and large, the position of many leaders in the industry is that the ideal situation is not to pay.Security experts across the industry would like to see all enterprises, large and small, be prepared for a hit so that they can recover their data without paying a ransomware fee. The question of whether to pay the ransomware fee is tricky, though, as sometimes organizations are left with no other options.MORE: How to respond to ransomware threats When asked whether companies should ever pay a ransomware fee, Ryan Manship, security practice director at RedTeam Security said, “The first thing about ransomware is that it’s in many ways like terrorism. The US has a policy not to negotiate with terrorists. Where does that come from? Why does it exist? The reality is, you can’t trust the bad guys. You can’t trust them to do what they say they are going to do, which is to give back access to your data.”To read this article in full or to leave a Continue reading

Happy anniversary, Windows 10: Here’s what coming in the latest update

Happy AnniversaryMicrosoft’s latest update to Windows 10, dubbed the Anniversary Update, is slated to officially drop on Aug. 2, a year after the initial release of Windows 10 last July 29. Windows 10 has been installed on more than 350 million devices, making it Microsoft’s most successful OS launch. However, there’s always room for improvement and this update introduces several changes, customization options, and new ways to interact with Windows 10. Here are the highlights:To read this article in full or to leave a comment, please click here