DockerHub Breach Exposes Usernames, Hashed Passwords, and GitHub Tokens of 5% of Hub Users
Docker disclosed one of their Hub databases was hacked and a subset of non-financial data, including usernames, hashed passwords, and GitHub and BitBucket tokens, was stolen.
GitHub to Integrate Semmle Code Analysis for Continuous Vulnerability Detection
With the acquisition of startup Semmle, GitHub aims to make continuous vulnerability detection part of their continuous integration/continuous deployment service.
VMware vSphere+ and vSAN+ Promise to Bring the Benefits of the Cloud to On-Premises Workloads
Recently announced, VMware vSphere+ and vSAN+ integrate Kubernetes with VMware virtualization technology to help transform on-premises workloads into SaaS-enabled infrastructure and simplify its management and evolution, says VMware.
OpenSSL Releases Fix for High-Severity Vulnerability
OpenSSL 3.0.4, released less than a month ago, introduced a bug that enabled a remote code execution vulnerability on machines computing 2048 bit RSA keys on X86_64 CPUs. A fix is now available in OpenSSL 3.0.5.