Sonatype Lift uses deep code analysis to suggest bug fixes

Sonatype has launched a new deep code analysis platform called Lift which can detect a wide range of bug types.

Lift detects bugs ranging from style issues to complex coding errors commonly found in first-party source code and third-party open source libraries.

Research from Veracode last year found that open-source libraries cause security flaws in around 70 percent of apps. However, open-source libraries are often critical to projects.

Using a deep code...

Trend Micro partners with Snyk to fight open-source bugs

Cybersecurity leader Trend Micro is partnering up with application security platform Snyk to fight open-source bugs.

Research from Veracode last year found that open-source libraries cause security flaws in 70 percent of apps. Snyk itself has observed a 2.5x growth in open-source vulnerabilities over the past three years.

However, open-source is vital to the advancement of the software development industry. Snyk estimates that around 80 percent of application today is...

Perforce acquires AI-based mobile testing experts 21 Labs

Enterprise development solutions provider Perforce has acquired the AI-based mobile testing experts at 21 Labs.

The acquisition will bolster Perforce’s existing portfolio of solutions for the enterprise development lifecycle with powerful testing capabilities.

21 Labs’ self-learning, AI-based mobile automation testing tool helps businesses to deploy quality iOS and Android apps faster.

Shani Shoham, CEO and Founder of 21 Labs, said:

“Together,...

Codecov breach prompts fears of another SolarWinds-style hack

A hack impacting software testing firm Codecov is expected to have resulted in hundreds of networks being compromised, prompting fears of a fallout similar to the recent SolarWinds attack.

Codecov has over 29,000 customers including companies such as IBM, Proctor & Gamble, Hewlett Packard Enterprise, Atlassian, Washington Post, and GoDaddy. The potential scale of the attack has led to a federal investigation.

"We are aware of the claims and we are investigating...

Corellium enables iOS device virtualisation on individual accounts

Security research firm Corellium has enabled the virtualisation of iOS devices on individual accounts.

Corellium won a lawsuit filed against it by Apple in December which led to this week’s policy change.

In the lawsuit, first filed in 2019, Apple alleged Corellium's virtualisation violated copyrights relating to iOS, iTunes, and UI. However, the court ruled in Corellium’s favour after deeming the company’s virtualisation comes under fair use.

Virtual iOS...

Amazon’s AI-powered code reviewer CodeGuru is now available

An artificial intelligence-powered code reviewer from Amazon Web Services (AWS) called CodeGuru has reached general availability.

CodeGuru is a set of tools which use machine learning for reviewing code and suggesting potential optimisations to improve performance.

The set consists of two components, Reviewer and Profiler, and first launched into preview last December.

AWS trained Reviewer using code from over 10,000 open source projects in addition to the...

Android 11 will add a new App Compatibility feature to ease testing

Google plans to make testing your apps for compatibility issues much simpler in the next Android release.

The company's annual I/O developer event is an exciting time for techies. Shiny new toys are debuted at I/O for both developers and consumers, but they can also present compatibility problems which can ruin the experience users have with your apps.

Starting with Android 11, Google plans to add an App Compatibility feature which can be found in the developer...

Disruptive AI technology can overcome the trade-off between cost, speed and quality

Anyone who has ever managed a project has probably had to make a decision between delivering at high speed, high quality, or low cost: As the saying goes, you can only pick two. This is usually as true for the delivery of software as it is for anything else, but mounting pressure to digitally transform and continuously deliver updates has made speed a default requirement for most organisations. This leaves a choice between quality and cost, which often comes down to a decision about...

We can work it out: How the Lennon-McCartney partnership can translate to software development

At the beginning of October Abbey Road, The Beatles’ last studio record – though penultimate release – regained the number one spot in the UK charts thanks to the release of a special 50th anniversary edition.

As with the rest of the band’s oeuvre, the composition credit for the majority of tracks was attributed to ‘Lennon-McCartney’, rather than one of the duo. While...

WWDC 19 recap: Developers will provide the excitement

Apple has completed its annual WWDC keynote for another year, so let's dive into the announcements to see if we should be getting excited.

Let’s start with how our  ‘what to expect’ predictions fared last month:

✔ iOS dark mode

✔ iPad home screen update (widget support added)

✔ Updated first-party apps (Messages, Reminders, Mail, Notes,...