Apache Log4j vulnerability CVE-2021-44228 is a critical zero-day code execution (RCE) vulnerability (CVSS 10.0 critical severity) that allows a threat actor to execute arbitrary code on systems using Log4j 2.0-beta9 up to 2.14.1. Digital14 strongly advise that organisations follow the recommendations outlined in this report to mitigate against this threat.

Is it possible to completely integrate security into the CI/CD approach without causing any delays that would be detrimental to its key benefit – quicker software delivery? Let us highlight how DevSecOps (Security-integrated DevOps) can be implemented and delivered without impacting the agility of the overall approach.

Each year, the month of October is referred to as Cybersecurity Awareness Month, and this year we wanted to keep the message simple, clear, and to the point.

In the modern era of digitalisation, critical societal functions such as distribution of electricity, drinking water, district heating and cooling are dependent on computer-based systems for supervision, regulation and monitoring of the central physical processes.