DnB Asset Management AS Increases Position in MongoDB, Inc. as Confidence Grows

MMS Founder
MMS RSS

Posted on mongodb google news. Visit mongodb google news

Article &DnB Asset Management AS Increases Position in MongoDB, Inc.

Article Date: September 18, 2023

&DnB Asset Management AS, a prominent institutional investor, has recently revealed its increased position in MongoDB, Inc. during the second quarter of this year. According to recent disclosures with the Securities & Exchange Commission, the company acquired an additional 522 shares of MongoDB, boosting its overall holdings by 5.1%. As a result, &DnB Asset Management AS now owns 10,680 shares of MongoDB stock with an approximate value of $4.39 million as of the end of the most recent quarter.

MongoDB, Inc. is a globally recognized provider of a general-purpose database platform. The company offers a range of solutions such as MongoDB Atlas – a hosted multi-cloud database-as-a-service offering; MongoDB Enterprise Advanced – a commercial database server catering to enterprise customers; and Community Server – a free-to-download version equipped with essential features for developers to initiate their work on the platform.

On Monday, MongoDB stock commenced trading at $362.13 per share. The company has witnessed significant price fluctuations over the past year, with its 52-week low at $135.15 and its 52-week high reaching $439.00. As for its financial health indicators, MongoDB demonstrates a quick ratio and current ratio of 4.48 each while maintaining a debt-to-equity ratio of 1.29. Additionally, the firm’s 50-day simple moving average stands at $385.82 and its 200-day simple moving average is recorded at $316.93.

With a sizable market capitalization amounting to $25.84 billion and a beta coefficient standing at 1.11 indicating moderate volatility compared to the market benchmark, MongoDB continues to solidify its presence in an evolving industry.

&DnB Asset Management AS’ decision to increase their position in MongoDB reflects their confidence in the company’s potential for further growth and success. As an institutional investor, &DnB Asset Management AS strategically manages its investment portfolio, and the addition of MongoDB shares affirms their optimistic outlook on the future prospects of the database platform provider.

As always, investors are encouraged to conduct thorough research and consult with financial advisors before making any investment decisions. The financial markets can be volatile, and individual circumstances vary.

Leggett & Platt, Incorporated

LEG

Strong Buy

Updated on: 18/09/2023

Price Target

Current $24.95

Concensus $32.00


Low $21.00

Median $32.00

High $43.00

Show more

Social Sentiments

We did not find social sentiment data for this stock

Analyst Ratings

Analyst / firm Rating
Piper Sandler Sell
Piper Sandler Sell
Goldman Sachs Buy
Peter Keith
Piper Sandler
Buy

Show more

Shifts in Stakeholding and Confidence in MongoDB: A Look at Institutional Investors, Hedge Funds, and Insider Trading


MongoDB, Inc, a global general purpose database platform provider, has seen several hedge funds adjust their stakes in the company. 1832 Asset Management L.P. increased its holdings in MongoDB by a staggering 3,283,771.0% during the fourth quarter. This move resulted in 1832 Asset Management L.P. now owning 1,018,000 shares of the company’s stock valued at $200,383,000 after acquiring an additional 1,017,969 shares in the last quarter.

Price T Rowe Associates Inc. MD also added to their stake in MongoDB, increasing their ownership by 13.4% during the first quarter. They now own 7,593,996 shares of the company’s stock valued at $1,770,313,000 after purchasing an additional 897,911 shares.

Renaissance Technologies LLC followed suit by raising its stake in MongoDB by a significant 493.2% during the fourth quarter. As a result of this move, Renaissance Technologies LLC now owns 918,200 shares of the company’s stock valued at $180,738,000 after acquiring an additional 763,400 shares.

Norges Bank also made a notable move in acquiring a new position in MongoDB during the fourth quarter valued at approximately $147,735 about thousands of dollars: norgs(8) machine learning based algorithm potentially correct stock price movements from september data approximation given for September ,18th . Meanwhile , In other news relevant to investors , champlain investment partners llc purchased an estimated amount summarized as approximately $89 million worth of newly invested funds being placed into mongodb firm.

Overall ownership and stakes appear to be dominated by institutional investors and hedge funds who account for approximately folds of entire market capitalization were exposed within fiscal year endending reports!

In addition to changes made by institutional investors and hedge funds regarding their stakeholding levels within MongoDB group limited there was also some notable insider trading activity. CEO Dev Ittycheria sold 50,000 shares of the company’s stock in a transaction dated Wednesday, July 5th. The shares were sold at an average price of $407.07, resulting in a total value of $20,353,500. Following this sale, the CEO now directly owns 218,085 shares in the company valued at approximately $88,775,860.95.

Moreover , In addition to this insider trading activity , we also observed that CTO Mark Porter sold 2,734 shares of the business’s stock on Monday , specifically during july right after the holiday occasion so market volume to be low like july which is widely recognized and established the fact . These stocks were sold at an average price of $412.33 leading to a total transaction value summarizable as $1,127,310 equivalent worth .

Insiders have been busy with their transactions as it was revealed that a total of 97,520 shares were offloaded in recent months oh approximately septembers , thus amounting to a whopping $39 million dollars generated through these sales alone!

Taking into account all these activities taking place both within and outside MongoDB itself- what does this tell us about investors’ confidence levels? Well it seems from various reports issued by different brokerages commenting on MDB’s recent move that despite some analysts rating them negatively others favoring optimism surrounding future outlooks overall sentiment remains positive

Citigroup for instance increased its price target on MDB shares from $430 to $455 and gave it a “buy” rating.

On the other hand , VNET Group maintained their neutral position regarding short term analysis should Investor After couple years expect next variation would deteriorate company position however Oppenheimer raised its target price even further placing it at a significant level between [$480-$505]!

Then The Goldman Sachs Group seems believe mdb will consolidate furthered raise any resistance levels currently holds steady, report mentioned raise their target price from $420 to $440. All this additional price coverage of course ultimately is driven by JMP securities , who notably raised their targets even higher in september at $425 reaching as high $440 a value giving these stocks moderate outweighing positive outlooks

In conclusion, despite the recent shifts in stakeholding by institutional investors and hedge funds, it is evident that confidence in MongoDB remains high. The company’s general purpose database platform has attracted attention from both investors and analysts alike. Analysts have provided positive ratings and upward revisions to price targets, indicating a favorable outlook for the company’s stock. As we move forward into the future, it will be interesting to see how MongoDB continues to perform and if investors maintain their trust in the company’s long-term potential.

*The above analysis is based on available data as of September 18th, 2023 and may not reflect current market conditions.*

Article originally posted on mongodb google news. Visit mongodb google news

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Mongodb Insider Sold Shares Worth $1854119, According to a Recent SEC Filing

MMS Founder
MMS RSS

Posted on mongodb google news. Visit mongodb google news

MongoDB, Inc. is a developer data platform company. Its developer data platform is an integrated set of databases and related services that allow development teams to address the growing variety of modern application requirements. Its core offerings are MongoDB Atlas and MongoDB Enterprise Advanced. MongoDB Atlas is its managed multi-cloud database-as-a-service offering that includes an integrated set of database and related services. MongoDB Atlas provides customers with a managed offering that includes automated provisioning and healing, comprehensive system monitoring, managed backup and restore, default security and other features. MongoDB Enterprise Advanced is its self-managed commercial offering for enterprise customers that can run in the cloud, on-premises or in a hybrid environment. It provides professional services to its customers, including consulting and training. It has over 40,800 customers spanning a range of industries in more than 100 countries around the world.


More about the company

Article originally posted on mongodb google news. Visit mongodb google news

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Azure SQL Database outage caused by network infrastructure • The Register – Theregister

MMS Founder
MMS RSS

Posted on nosqlgooglealerts. Visit nosqlgooglealerts

Azure SQL Database caused some annoyance over the weekend with admins on the US east coast unable to connect to the service following a network infrastructure power failure.

The disruption started at 07:33 UTC on September 16 and wasn’t fully mitigated until more than 12 hours later at 21:38, Microsoft confirmed on its status page.

Microsoft said: “Some customers using Azure SQL Database in East US may have experienced issued when trying to connect to Databases. Connections to database hosted in East US region may have resulted in persistent errors or timeouts.”

As a customer noted on the platform formerly known as Twitter: “Sql DB connection lost in production. The failover doesn’t kick in, causing impact in daily activities. Thanks god it (sic) Saturday.”

The exact cause of the wobbly sessions has yet to be determined. Microsoft said: “We identified that during a brief period of time an underlying network infrastructure experienced power power issue. This caused compute nodes to become unhealthy, resulting in failures and timeouts for SQL Database.”

As is often the case, the domino effect kicked in, and downstream services that rely on SQL Database struggled to run as normal.

“We were notified of this issue through our internal monitoring systems, prompting us to initiate a thorough investigation,” Microsoft said. “In order to mitigate the initial impact, we rebooted the affected compute nodes, thereby restoring functionality to majority of databases. Subsequently, the remaining SQL DB instances was brought back online got bring survives to full functionality.”

The power issue at the root of the degraded services is still the source of investigations by engineers at Microsoft as they try to “establish a workstream to prevent future occurrence.”

So not exactly the mother of all outages that caused customers to gnash their teeth or pull their hair out, but also not a great look for Microsoft SQL DBV on Azure. Still, it wasn’t as embarrassing as the incident reported a week ago that wiped out Azure services on the Australian East cloud region.

In this, “a utility power sag tripped a subset of the cooling units offline in one datacenter, within one of the Availability Zones.” Microsoft concluded that understaffing and automation led to the challenge. ®

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


NoSQL Software Market Navigating Growth Opportunities and Forecasted Outlook from 2023-2030

MMS Founder
MMS RSS

Posted on nosqlgooglealerts. Visit nosqlgooglealerts

Our Global NoSQL Software Market report provides comprehensive insights into the Market trends and competitive landscape. We give an in-depth analysis of the factors driving the growth of the Market, such as the technological innovations in the software and the increasing demand for cloud-based solutions. Furthermore, the report analyzes the key players’ strategies for their product and Market expansion.

The report also provides detailed information about the key segments of the NoSQL Software Market, such as end-users, regions, application types, and product types. It also gives an insight on the competitive landscape of the Market and helps the reader identify the competitive edge by providing information about the latest developments, such as product launches, partnerships, and acquisitions. Additionally, the report gives an understanding of the factors that are restraining the growth of the Market. As such, it provides a comprehensive analysis of the Market which can be used by the stakeholders to make informed decisions.

Request PDF Sample Copy of Report: (Including Full TOC, List of Tables & Figures, Chart) @ https://www.marketresearchintellect.com/download-sample/?rid=280810

Discover the boundless possibilities with NoSQL Software Market ! As a pioneering force in the industry, we redefine excellence through unmatched products and services. Our customer-driven approach and relentless pursuit of innovation have catapulted us to the forefront. Join our network of satisfied clients and experience the transformative power of NoSQL Software Market, where growth knows no bounds. Elevate your business to new heights with us today!

In the coming years, the global NoSQL Software Market is set to experience steady growth, driven by a combination of continuous technological advancements, growing environmental awareness, and the rising need for streamlined operations. To seize the evolving Market opportunities, industry players are anticipated to concentrate on product innovation, strategic collaborations, and geographical expansion.

The research study includes profiles of leading companies operating in the NoSQL Software Market :

  • MongoDB
  • OrientDB
  • Amazon
  • Azure Cosmos DB
  • Couchbase
  • ArangoDB
  • CouchDB
  • MarkLogic
  • SQL-RD
  • RethinkDB
  • RavenDB
  • Microsoft
  • Redis

This NoSQL Software Market report reveals several key Market methods that may assist businesses in leveraging their position in the Market and diversifying their product range. It is an effective Market report instrument for conquering certain business setbacks. This sort of innovative Market research provides useful data in a timely manner. It also conducts data-driven research studies to provide insights into elements of Market growth. The bulk of the key insights in this study are based on in-depth information gleaned from primary and secondary data collection data.

NoSQL Software Market by Type

  • Cloud Based
  • Web Based

NoSQL Software Market by Application

  • E-Commerce
  • Social Networking
  • Data Analytics
  • Data Storage
  • Others

The Global NoSQL Software Market can be segmented based on various factors to gain a comprehensive understanding of its dynamics and opportunities. The segmentation allows for a more targeted analysis of specific Market segments, helping businesses make informed decisions and tailor their strategies accordingly.

Get a Discount On The Purchase Of This Report @ https://www.marketresearchintellect.com/ask-for-discount/?rid=280810

What is the Purpose Of The Report?

It provides an in-depth analysis of the overall growth prospects of the global and regional Market s. Moreover, it provides an overview of the competitive landscape of the global Market. Furthermore, the report provides a dashboard overview of leading companies, including their successful Market ing strategies, Market contributions, and recent developments in both historic and current contexts.

Our key underpinning is the 4-Quadrant which offers detailed visualization of four elements:

  • Customer Experience Maps
  • Insights and Tools based on data-driven research
  • Actionable Results to meet all the business priorities
  • Strategic Frameworks to boost the General Purpose Transistors growth journey

Table of Contents:

1. Introduction of the NoSQL Software Market  

  • Overview of the Market
  • Scope of Report
  • Assumptions

2. Executive Summary

3. Research Methodology of Market Research Intellect

  • Data Mining
  • Validation
  • Primary Interviews
  • List of Data Sources

4. NoSQL Software Market Outlook

  • Overview
  • Market Dynamics
  • Drivers
  • Restraints
  • Opportunities
  • Porters Five Force Model
  • Value Chain Analysis

5. NoSQL Software Market, By Product

6. NoSQL Software Market, By Application

7. NoSQL Software Market, By Geography

  • North America
  • Europe
  • Asia Pacific
  • Rest of the World

8. NoSQL Software Market Competitive Landscape

  • Overview
  • Company Market Ranking
  • Key Development Strategies

9. Company Profiles

10. Appendix

GET FULL INFORMATION ABOUT Click Here: NoSQL Software Market Size And Forecast

There are several compelling reasons to consider purchasing this report on the global NoSQL Software Market :

  • Comprehensive Market Insights: The report provides a detailed and comprehensive analysis of the global NoSQL Software Market, covering key trends, growth drivers, challenges, and opportunities. It offers valuable insights into Market dynamics, enabling informed decision-making and strategic planning.
  • In-Depth Industry Analysis: The report delves into the competitive landscape, Market segmentation, and key players’ profiles. It presents a thorough assessment of the Market ‘s current and future potential, helping businesses identify potential partnerships, acquisitions, or investment opportunities.
  • Market size and Forecast: The report includes accurate Market sizing and forecasting data, enabling businesses to gauge the Market ‘s growth potential and plan their investments accordingly. This data-driven approach assists in optimizing resource allocation and mitigating risks.
  • Emerging Trends and Innovations: By highlighting emerging trends and innovations in the NoSQL Software Market, the report equips businesses with valuable foresight. Staying ahead of the curve on technological advancements and consumer preferences can offer a competitive edge.
  • Regional Analysis: The report examines the NoSQL Software Market across different regions, providing a comprehensive understanding of regional dynamics and Market variations. This information aids businesses in devising region-specific strategies and tapping into high-growth Market s.
  • Regulatory Insights: With an analysis of relevant regulations and policies impacting the NoSQL Software Market, the report helps businesses navigate compliance requirements and mitigate regulatory risks.

About Us: Market Research Intellect

Market Research Intellect is a leading Global Research and Consulting firm servicing over 5000+ global clients. We provide advanced analytical research solutions while offering information-enriched research studies.

We also offer insights into strategic and growth analyses and data necessary to achieve corporate goals and critical revenue decisions.

Our 250 Analysts and SMEs offer a high level of expertise in data collection and governance using industrial techniques to collect and analyze data on more than 25,000 high-impact and niche Market s. Our analysts are trained to combine modern data collection techniques, superior research methodology, expertise, and years of collective experience to produce informative and accurate research.

Our research spans a multitude of industries including Energy, Technology, Manufacturing and Construction, Chemicals and Materials, Food and Beverages, etc. Having serviced many Fortune 2000 organizations, we bring a rich and reliable experience that covers all kinds of research needs.

Contact the US:
Mr. Edwyne Fernandes
Market Research Intellect
US: +1 (650)-781-4080
US Toll-Free: +1 (800)-782-1768

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Java News Roundup: JCP 25th Anniversary, Foreign Function & Memory API, Eclipse Epicyro

MMS Founder
MMS Michael Redlich

Article originally posted on InfoQ. Visit InfoQ

This week’s Java roundup for September 11th, 2023 features news from OpenJDK, JCP, JDK 22, JDK 21, Payara Platform, Eclipse Epicyro, Grails Plugin Portal and milestone and point releases for: Spring Framework, Spring Data, Spring Tools, Quarkus, Micronaut, Helidon, MicroProfile Telemetry, Groovy, Camel Quarkus, Micrometer Metrics and Tracing, Piranha, JobRunr, JHipster Lite and Project Reactor.

OpenJDK

JEP 454, Foreign Function & Memory API, has been promoted from its JEP Draft 8310626 to Candidate status this past week. This JEP proposes to finalize this feature after two rounds of incubation and three rounds of preview: JEP 412, Foreign Function & Memory API (Incubator), delivered in JDK 17; JEP 419, Foreign Function & Memory API (Second Incubator), delivered in JDK 18; JEP 424, Foreign Function & Memory API (Preview), delivered in JDK 19; JEP 434, Foreign Function & Memory API (Second Preview), delivered in JDK 20; and JEP 442, Foreign Function & Memory API (Third Preview), to be delivered in the upcoming GA release of JDK 21. Improvements since the last release include: a new Enable-Native-Access manifest attribute that allows code in executable JARs to call restricted methods without the use of the --enable-native-access flag; allow clients to programmatically build C function descriptors, avoiding platform-specific constants; improved support for variable-length arrays in native memory; and support for multiple charsets in native strings.

Java Community Process

At a special event hosted by the New York Java Special Interest Group and Garden State Java User Group on September 13, 2023 at the Bank of New York Mellon in New York City, industry experts from the Java Community Process (JCP) Executive Committee (EC) participated in a panel discussion to reveal their favorite JCP EC memory and their favorite features from the upcoming GA release of JDK 21. Included in the festivities was a JDK 21 presentation by Dmitry Chuyko, Performance Architect at Bellsoft, and a 25th anniversary celebration of the JCP. More details on this event may be found in this InfoQ news story.

JDK 21

Build 35 remains the current build in the JDK 21 early-access builds. Further details on this build may be found in the release notes.

JDK 22

Build 15 of the JDK 22 early-access builds was made available this past week featuring updates from Build 14 that include fixes to various issues. More details on this build may be found in the release notes.

For JDK 22 and JDK 21, developers are encouraged to report bugs via the Java Bug Database.

Spring Framework

After two quiet previous weeks over at Spring, the team has provided point and milestone releases for Spring Framework, Spring Data and Spring Tools.

The fifth milestone release of Spring Framework 6.1.0 ships with bug fixes, dependency upgrades and a host of new features such as: instrument the new RestClient interface for observability; reinstate support for the legacy @ManagedBean annotation defined in JSR-250, Common Annotations for the Java Platform, and the @Named annotation defined in JSR 330, Dependency Injection for Java, to complement their Jakarta Annotations versions for improved migration of projects to Spring 6.0 and beyond; and a revision of the method signatures defined in the JdbcTestUtils class to accept instances of the JdbcOperations interface instead of the JdbcTemplate class. Further details on this release may be found in the release notes.

Similarly, versions 6.0.12 and 5.3.30 and of Spring Framework have been released featuring bug fixes, dependency upgrades and new features such as: an optimization of the getMostSpecificMethod() method defined in the ClassUtils class; an optimization of whitespace checks in the StringUtils class; and an elimination of redundant lookups of classes and annotation causing performance bottlenecks while creating instances of scoped beans. More details on these releases may be found in the release notes for version 6.0.12 and version 5.3.30.

The third milestone release of Spring Data 2023.1.0, codenamed Vaughn, delivers notable changes such as: support for JDK 21; use of virtual threads via configuration of the Java Executor interface; support for Kotlin value classes; and single query loading for Spring Data JDBC. Further details on this release may be found in the release notes.

Similarly, versions 2023.0.4, 2022.0.10 and 2021.2.16, all service releases of Spring Data, feature bug fixes and dependency upgrades to sub-projects such as: Spring Data Commons 3.1.4, 3.0.10 and 2.7.14; Spring Data MongoDB 4.1.4, 4.0.10 and 3.4.16; Spring Data Elasticsearch 5.1.4, 5.0.10 and 4.4.16; and Spring Data Neo4j 7.1.4, 7.0.10 and 6.3.16.

The release of Spring Tools 4.20.0 for Eclipse, Visual Studio Code and Theia ships with: a number of bug fixes; support for Eclipse IDE 2023-09; and improved Java reconciling support to show Spring-specific validations, re-built from the ground up, tuned for high performance to work seamlessly in large code bases. More details on this release may be found in the release notes.

Payara

Payara has released their September 2023 edition of the Payara Platform that includes Community Edition 6.2023.9, Enterprise Edition 6.6.0 and Enterprise Edition 5.55.0 featuring security fixes to address: CVE-2017-12617, a vulnerability in various Apache Tomcat versions with HTTP PUT enabled, where an attacker could upload a specially-crafted requested JSP file to the server such that any code it contained would be executed by the server; and CVE-2023-1370, a vulnerability in Json-smart where parsing too many nested JSON structured arrays and objects, due to no defined limit, could cause a stack overflow and crash the software. Improvements included: a removal of the obsolete methods, getEnvironment(), getCallerIdentity() and isCallerInRole(Identity) from the Jakarta EJB EJBContext interface, that were implemented in the Payara EJBContextImpl class; and improved functionality with the Hazelcast CP Subsystem. Further details on these versions may be found in the release notes for Community Edition 6.2023.9, Enterprise Edition 6.6.0 and Enterprise Edition 5.55.0.

Quarkus

Red Hat has released versions 3.3.3, 3.2.6 and 2.6.11.Final of Quarkus to address CVE-2023-4853, a vulnerability by which an attacker can bypass the HTTP security policies due to those security policies not correctly sanitizing certain character permutations when accepting requests, resulting in an incorrect evaluation of permissions. This could provide unauthorized endpoint access and a possible denial of service. More details on these releases may be found in the changelogs for version 3.3.3, version 3.2.6 and version 2.16.11.

Micronaut

The Micronaut Foundation has released version 4.1.1 of the Micronaut featuring Micronaut Core 4.1.5 and updates to modules: Micronaut Oracle Cloud, Micronaut AOT, Micronaut Data, Micronaut Kafka, Micronaut Kotlin Integrations, Micronaut Test, Micronaut Validation and Micronaut Multitenancy. Further details on this release may be found in the release notes.

Helidon

Helidon 2.6.3, a bug fix release, provides notable changes such as: replace the use of the deprecated socket() method with the namedSocket() method defined in the ServerConfiguration interface; update the requestedUri() method defined in the ServerRequest interface to correctly handle the IPv6 address format; and change the access specifier from private to public in the beforeEach() method defined in the OciMetricsDataTest class due to the documentation in the JUnit @BeforeEach annotation explicitly stating the methods must not be private or static. More details on this release may be found in the release notes.

MicroProfile

On the road to MicroProfile 6.1, version 1.1-RC3 of the MicroProfile Telemetry specification ships with a fix for a deployment issue in the JaxRsServerAsyncTestEndpoint TCK test class. Further details on this release may be found in the release notes.

Eclipse Foundation

OmniFishEE has introduced a new Eclipse EE4J project, Epicyro, that will serve as a compatible implementation of the Jakarta Authentication specification. This new project will define a general low-level SPI for authentication mechanisms, controllers that interact with a caller and a container’s environment to obtain the caller’s credentials. These will be validated and pass an authenticated identity (such as name and groups) to a container. Currently a milestone release, Epicyro will start with version 3.0.0 to align with Jakarta Authentication 3.0.0.

Apache Software Foundation

The second alpha release of Apache Groovy 5.0.0 delivers bug fixes, dependency upgrades and improvement such as: remove the use of the MagicAccessorImpl class that was once defined in the sun.reflect package; the JsonOutput class should handle Java records like Plain Old Groovy Objects (POGOs); and mark the main/run methods in Groovy scripts as generated by the compiler with the @Generated annotation. More details on this release may be found in the release notes.

Similarly, Apache Groovy 4.0.15 has been released with bug fixes, dependency upgrades and an improvement with the JsonOutput class that should handle Java records like POGOs. Further details on this release may be found in the release notes.

To maintain alignment with Quarkus, Camel Quarkus 3.2.0 has been released with notable resolutions to issues such as: a failed compilation for gRPC applications in dev mode; an expansion of tests covering Splunk, Saxonica and the gRPC extension; and an InvocationTargetException upon executing sanity checks with the LDAP Realm extension. More details on this release may be found in the release notes.

Grails

The Grails Foundation has introduced a redesigned Grails Plugin Portal featuring: improved search functionality; a paginated list of all plugins; a list of top-rated plugins; and the latest plugin releases. The previous version of the portal was plagued by frequent downtime, high resource utilization and slow performance.

Micrometer

Versions 1.12.0-M3, 1.11.4, 1.10.11 and 1.9.15 of Micrometer Metrics all deliver dependency upgrades and a bug fix to ensure the LongTaskTimer and FunctionTimer interfaces produce consistent data. Version 1.12.0-M3 provides new features such as: a variant of the hasAnObservationWithAKeyValue() method for use in testing with the KeyValue interface; provide a way to make decisions on use of the /actuator endpoint in Spring Security based on the parent in the ObservationPredicate interface, namely the Java BiPredicate interface; and add a timestamp to the nested Event interface defined in the Observation interface. Further details on these releases may be found in the release notes for version 1.12.0-M3, version 1.11.4, version 1.10.11 and version 1.9.15.

Similarly, versions 1.2.0-M3, 1.1.5 and 1.0.10 of Micrometer Tracing all deliver dependency upgrades and bug fixes such as: the ObservationAwareSpanThreadLocalAccessor class does not release an instance of the nested SpanAction class when the thread has completed its task; and add the ThreadLocalAccessor interface to propagate an instance of the Baggage interface with Reactor. A new feature in version 1.2.0-M3 is to allow setting of a timestamp of an event on a span. More details on these releases may be found in the release notes for version 1.2.0-M3, version 1.1.5 and version 1.0.10.

Piranha

The release of Piranha 23.9.0 delivers notable changes such as: a new PidFeature class for improved handling of process IDs; fix a testing issue with SonarCloud; and a new IsolatedWebAppFeature class for improved handling of web applications. Further details on this release may be found in their documentation and issue tracker.

JobRunr

Version 6.3.1 of JobRunr, a library for background processing in Java that is distributed and backed by persistent storage, has been released featuring notable changes: a NullPointerException in a Quarkus extension if the quarkus.jobrunr.job-scheduler.enabled property is set to false; and add missing Spring AOT hints that caused exceptions for applications using JobRunr 6.3.0 and Spring Boot 3.1.3; and the @Job annotation is not registering instances of a JobFilter interface after upgrading to Spring Boot 3.1.2 and JobRunr 6.3.0. More details on this release may be found in the release notes.

JHipster

Version 0.42.0 of JHipster Lite has been released featuring bug fixes, dependency upgrades and new features/enhancements such as: a new StatisticsCriteria class to add criteria to the /stats endpoint; the removal of an unnecessary TestNG dependency; and a new checkstyle module to check for unused imports during build. Further details on this release may be found in the release notes.

Project Reactor

The third milestone release of Project Reactor 2023.0.0 provides dependency upgrades to reactor-core 3.6.0-M3, reactor-pool 1.0.2, reactor-netty 1.1.11 and reactor-kafka 1.3.21. There was also a realignment to version 2023.0.0-M3 with the reactor-addons 3.5.1 and reactor-kotlin-extensions 1.2.2 artifacts that remain unchanged. More details on this release may be found in the changelog.

Similarly, Project Reactor 2022.0.11, the eleventh maintenance release, provides dependency upgrades to reactor-core 3.5.10, reactor-netty 1.1.11, reactor-kafka 1.3.21 and reactor-pool 1.0.2. There was also a realignment to version 2022.0.11 with the reactor-addons 3.5.1 and reactor-kotlin-extensions 1.2.2 artifacts that remain unchanged. Further details on this release may be found in the changelog.

About the Author

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


NoSQL Database Market Emerging Trend, Advancement, Growth and Business … – Rouge Fox

MMS Founder
MMS RSS

Posted on nosqlgooglealerts. Visit nosqlgooglealerts

NoSQL Database market provides strategic business intelligence for investments. The study reveals profitable investment strategies for companies, business executives, product marketing managers, new business investors and many more in preferred locations. The study covers and includes emerging market trends, developments, opportunities, and challenges in the industry. This report also covers extensively researched competitive landscape sections with prominent companies and profiles, including their market shares and projects. The NoSQL Database Market report offers detailed qualitative and quantitative insights into the industry potential and future scopes accessible in the Market. The report splits the market size, by volume and value, on the basis of application type and geography.

Request PDF Sample Copy of Report

https://www.marketinsightsreports.com/reports/082912942878/global-nosql-database-market-growth-trends-and-forecast-2023-to-2028-by-types-by-application-by-regions-and-by-key-players-dynamodb-objectlabs-corporation-skyll-marklogic/inquiry?Mode=Rohan

Market Segmentation by Product Type

Column

Document

Key-value

Graph

Crucial Applications of the Market are:

E-Commerce

Social Networking

Data Analytics

Data Storage

Others

The report offers key drivers that propel the growth in the NoSQL Database market. These insights help market players in devising strategies to gain market presence. The research also outlined restraints of the market. Insights on opportunities are mentioned to assist market players in taking further steps by determining the potential in untapped regions. The research offers detailed segmentation of the NoSQL Database market. Key segments analysed in the research include global and geography. Extensive analysis of sales, revenue, growth rate, and market share of each for the historic period and the forecast period is offered with the help of tables.

Top Key Players Profiled in this report are:

DynamoDB, ObjectLabs Corporation, Skyll, MarkLogic, InfiniteGraph, Oracle, MapR Technologies, he Apache Software Foundation, Basho Technologies, Aerospike

Geographical Outlook:

North America (U.S., Canada, Mexico)

Europe (U.K., Italy, Germany, Russia, France, Spain, The Netherlands and Rest of Europe)

Asia-Pacific (India, Japan, China, South Korea, Australia, Indonesia Rest of Asia Pacific)

Latin America (Colombia, Brazil, Argentina, Rest of Latin America)

Middle East & Africa (Saudi Arabia, U.A.E., South Africa, Rest of Middle East & Africa)

The market research report offers a comprehensive analysis of the segments of the NoSQL Database market. But it also provides a wide Outlook related to the functionality, expansions, opportunities and the market evaluation of every segment together with the anticipated CAGR including the different types of a sub segment of every segment throughout the forecast period. Apart from this the segmentation part contains controlling and driving factors to describe the possible growth of the market. The study is important for businesses that broadly use the product due to the respective applications. A detailed explanation and provided related to the regions of application that explain what the item is used by the businesses to leverage their company portfolio.

Download Free Sample of This Strategic Report@ (Flat 25% Off):

https://www.marketinsightsreports.com/reports/082912942878/global-nosql-database-market-growth-trends-and-forecast-2023-to-2028-by-types-by-application-by-regions-and-by-key-players-dynamodb-objectlabs-corporation-skyll-marklogic/discount?Mode=Rohan

Objectives of the Report:

  • To carefully analyze and forecast the size of the NoSQL Database market by value and volume.
  • To estimate the market shares of major segments of the NoSQL Database
  • To showcase the development of the NoSQL Database market in different parts of the world.
  • To analyze and study micro-markets in terms of their contributions to the NoSQL Databasemarket, their prospects, and individual growth trends.
  • To offer precise and useful details about factors affecting the growth of the NoSQL Database
  • To provide a meticulous assessment of crucial business strategies used by leading companies operating in the NoSQL Database market, which include research and development, collaborations, agreements, partnerships, acquisitions, mergers, new developments, and product launches

The Report Offers Information On The Following Points:

  1. Market Penetration: Offers detailed information on NoSQL Database by the key market players in the global NoSQL Database
  2. Product Development And Innovation: Provides intelligent information on future technologies, new product developments and research and development activities in the NoSQL Database
  3. Market Diversification: Provides information about the new product launches, recent development, geography as well as investment in the NoSQL Database
  4. Market Development: Provides detailed information about the lucrative emerging market as well as examines the market for the NoSQL Database
  5. Competitive Assessment And Intelligence: Comprises an exhaustive assessment of the market strategies, shares, products and manufacturing capabilities of the key players in the NoSQL Database

NOTE: The COVID-19 pandemic and the ongoing Russia-Ukraine War have resulted in significant changes in consumer behavior across all sectors of society. As a result, industries are required to restructure their strategies to adapt to evolving market requirements. This report provides a comprehensive analysis of the impact of both the COVID-19 pandemic and the Russia-Ukraine War on the Silos market. It offers valuable insights to assist you in formulating business strategies that align with the new industry norms, taking into account the challenges posed by these two major events.

Access Your Report Here:

https://www.marketinsightsreports.com/reports/082912942878/global-nosql-database-market-growth-trends-and-forecast-2023-to-2028-by-types-by-application-by-regions-and-by-key-players-dynamodb-objectlabs-corporation-skyll-marklogic?Mode=Rohan

How is this report worth your money?

  • By providing comprehensive insights into the market
  • Competitive research and analysis
  • Helps to gain a different perspective for approaching the crisis, if needed
  • Data-driven statistics to help track the growth of market segments or product categories
  • Global analysis that gives readers a broader perspective for performing a SWOT analysis
  • Presents case context studies from past and present scenarios.
  • Expert advice.

What are the market factors described in the report?

The NoSQL Database Market is a data-intensive report that includes expert analysis to help you draw conclusions. It also helps you develop strategies for existing or new businesses. One of the most read topics of interest to our readers is competitive Market information and analysis.

Furthermore, our report focuses on the scientific advancements made in the NoSQL Database market, as well as in-depth analysis of the supply chain. We also provide an exhaustive analysis of the pricing structure of major products in the market. This enables stakeholders to gain insights into how different companies are pricing their products, in order to gain a competitive advantage. Additionally, we provide an analysis of the competitive strategies adopted by major players in the NoSQL Database market, helping stakeholders to gain actionable insights.

** Note – This report sample includes:

  • Scope For 2023
  • Brief Introduction to the research report.
  • Table of Contents (Scope covered as a part of the study)
  • Top players in the market
  • Research framework (structure of the report)

Contact Us : Irfan Tamboli (Head of Sales) – Market Insights Reports

Phone: + 1704 266 3234 | +91-750-707-8687

sales@marketinsightsreports.com   | irfan@marketinsightsreports.com

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


MongoDB, Inc. (NASDAQ:MDB) Shares Purchased by DnB Asset Management AS

MMS Founder
MMS RSS

Posted on mongodb google news. Visit mongodb google news

DnB Asset Management AS boosted its position in MongoDB, Inc. (NASDAQ:MDBFree Report) by 5.1% during the 2nd quarter, according to the company in its most recent disclosure with the Securities & Exchange Commission. The institutional investor owned 10,680 shares of the company’s stock after acquiring an additional 522 shares during the quarter. DnB Asset Management AS’s holdings in MongoDB were worth $4,389,000 at the end of the most recent quarter.

Several other hedge funds have also recently added to or reduced their stakes in MDB. 1832 Asset Management L.P. raised its holdings in MongoDB by 3,283,771.0% in the fourth quarter. 1832 Asset Management L.P. now owns 1,018,000 shares of the company’s stock valued at $200,383,000 after acquiring an additional 1,017,969 shares in the last quarter. Price T Rowe Associates Inc. MD increased its stake in MongoDB by 13.4% in the first quarter. Price T Rowe Associates Inc. MD now owns 7,593,996 shares of the company’s stock valued at $1,770,313,000 after purchasing an additional 897,911 shares during the last quarter. Renaissance Technologies LLC increased its stake in MongoDB by 493.2% in the fourth quarter. Renaissance Technologies LLC now owns 918,200 shares of the company’s stock valued at $180,738,000 after purchasing an additional 763,400 shares during the last quarter. Norges Bank purchased a new position in MongoDB in the fourth quarter valued at approximately $147,735,000. Finally, Champlain Investment Partners LLC purchased a new position in MongoDB in the first quarter valued at approximately $89,157,000. Institutional investors and hedge funds own 88.89% of the company’s stock.

Insider Buying and Selling

In related news, CEO Dev Ittycheria sold 50,000 shares of the business’s stock in a transaction dated Wednesday, July 5th. The shares were sold at an average price of $407.07, for a total value of $20,353,500.00. Following the sale, the chief executive officer now directly owns 218,085 shares in the company, valued at approximately $88,775,860.95. The transaction was disclosed in a legal filing with the Securities & Exchange Commission, which is available through this link. In related news, CEO Dev Ittycheria sold 50,000 shares of the business’s stock in a transaction dated Wednesday, July 5th. The shares were sold at an average price of $407.07, for a total value of $20,353,500.00. Following the completion of the transaction, the chief executive officer now owns 218,085 shares of the company’s stock, valued at approximately $88,775,860.95. The sale was disclosed in a filing with the Securities & Exchange Commission, which is available at the SEC website. Also, CTO Mark Porter sold 2,734 shares of the business’s stock in a transaction dated Monday, July 3rd. The shares were sold at an average price of $412.33, for a total transaction of $1,127,310.22. Following the completion of the transaction, the chief technology officer now directly owns 35,056 shares of the company’s stock, valued at approximately $14,454,640.48. The disclosure for this sale can be found here. Insiders have sold 97,520 shares of company stock worth $39,180,574 in the last three months. Corporate insiders own 4.80% of the company’s stock.

MongoDB Price Performance

MongoDB stock opened at $362.13 on Monday. MongoDB, Inc. has a 52 week low of $135.15 and a 52 week high of $439.00. The company has a quick ratio of 4.48, a current ratio of 4.48 and a debt-to-equity ratio of 1.29. The firm’s 50-day simple moving average is $385.82 and its 200 day simple moving average is $316.93. The firm has a market capitalization of $25.84 billion, a PE ratio of -104.66 and a beta of 1.11.

Analysts Set New Price Targets

Several brokerages have commented on MDB. Citigroup increased their price target on shares of MongoDB from $430.00 to $455.00 and gave the company a “buy” rating in a research note on Monday, August 28th. VNET Group restated a “maintains” rating on shares of MongoDB in a research report on Monday, June 26th. Oppenheimer raised their target price on shares of MongoDB from $430.00 to $480.00 and gave the stock an “outperform” rating in a research report on Friday, September 1st. The Goldman Sachs Group raised their target price on shares of MongoDB from $420.00 to $440.00 in a research report on Friday, June 23rd. Finally, JMP Securities raised their target price on shares of MongoDB from $425.00 to $440.00 and gave the stock a “market outperform” rating in a research report on Friday, September 1st. One analyst has rated the stock with a sell rating, three have given a hold rating and twenty-one have given a buy rating to the company’s stock. Based on data from MarketBeat.com, MongoDB presently has an average rating of “Moderate Buy” and a consensus price target of $418.08.

View Our Latest Report on MDB

MongoDB Company Profile

(Free Report)

MongoDB, Inc provides general purpose database platform worldwide. The company offers MongoDB Atlas, a hosted multi-cloud database-as-a-service solution; MongoDB Enterprise Advanced, a commercial database server for enterprise customers to run in the cloud, on-premise, or in a hybrid environment; and Community Server, a free-to-download version of its database, which includes the functionality that developers need to get started with MongoDB.

Read More

Want to see what other hedge funds are holding MDB? Visit HoldingsChannel.com to get the latest 13F filings and insider trades for MongoDB, Inc. (NASDAQ:MDBFree Report).

Institutional Ownership by Quarter for MongoDB (NASDAQ:MDB)

This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest and most accurate reporting. This story was reviewed by MarketBeat’s editorial team prior to publication. Please send any questions or comments about this story to contact@marketbeat.com.

Before you consider MongoDB, you’ll want to hear this.

MarketBeat keeps track of Wall Street’s top-rated and best performing research analysts and the stocks they recommend to their clients on a daily basis. MarketBeat has identified the five stocks that top analysts are quietly whispering to their clients to buy now before the broader market catches on… and MongoDB wasn’t on the list.

While MongoDB currently has a “Moderate Buy” rating among analysts, top-rated analysts believe these five stocks are better buys.

View The Five Stocks Here

If a company’s CEO, COO, and CFO were all selling shares of their stock, would you want to know?

Get This Free Report

Article originally posted on mongodb google news. Visit mongodb google news

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Big Data and Analytics Market 2023 Trends | Microsoft, MongoDB, Predikto – Rouge Fox

MMS Founder
MMS RSS

Posted on mongodb google news. Visit mongodb google news

Global Big Data and Analytics Market Insights, Forecast to 2029

The research study “Big Data and Analytics Market 2023 Trends” provides you with a thorough analysis of the current market situation and potential future opportunities.

The research includes a complete analysis and projection for the worldwide Big Data and Analytics industry on a global and regional scale from 2021 to 2031. The research offers revenue statistics (in millions of dollars) for the years 2016 to 2020, as well as a forecast for the years 2021 to 2031. The research offers a complete market analysis as well as a discussion of market drivers, limits, and opportunities. It also estimates the effect of these drivers and restrictions on the Big Data and Analytics market between 2021 and 2031.

   Request a pdf sample report : https://www.orbisresearch.com/contacts/request-sample/7204251 

The analyses enable report the audience to analyze the Big Data and Analytics sale based on an assortment of settings, including loyalty to the brand, switching costs, capital expenditures, benefits of scale, legal regulations, existing sales connections, exclusive technologies and patents, buyer habits, and promotion impacts. This classified material is intended to assist industry participants in making decisions. Furthermore, the analysis highlights opportunities for new rivals to enter the industry. Furthermore, the Big Data and Analytics report provides a comprehensive overview of the leading manufacturers and dealers in several essential sectors. Firms are expected to be able to boost their market penetration networks and worldwide reach by utilizing this study and data.

  Top Players in the Big Data and Analytics market report:

 

Microsoft, MongoDB, Predikto, Informatica, CS, Blue Yonder, Azure, Software AG, Sensewaves, TempoIQ, SAP, OT, IBM, Cyber Group, Splunk  

The majority of the study focuses on qualitative features that serve as the foundation for growth forecasts. Understanding the most essential driving forces and how they affect growth sizes and advancements is vital for accurately projecting future possibilities. Furthermore, the report evaluates current business trends and well-known megatrends across a range of industries to estimate their impact on demand and revenue development in the worldwide Big Data and Analytics market.

This research looks at existing trends as well as new projections and market considerations. As a result, market-influencing and restricting forces were thoroughly explored. A complete market study is accomplished by accentuating crucial product positioning and regularly monitoring the market’s primary rivals. Financial studies, market-leading techniques, breakthroughs, and a variety of commodities supplied by major overseas rivals are also included in the research.

This intelligence report provides a comprehensive overview of and in the global market, as well as thorough information with segmentation. This research provides a detailed examination of the present Big Data and Analytics Market in terms of demand and supply, as well as current and prospective pricing patterns. Income, market share, profit margin, essential product portfolio, and SWOT analysis are all included in the profiles of worldwide large firms. The supply chain is studied from an industrial standpoint in this research, which includes the introduction of a process chart, the major raw material and cost analysis upstream, and the distributor and downstream buyer analysis. This research looks at market drivers and inhibitors in the context of global and regional market size and projections, key product development trends, and typical downstream segment circumstances.

 Buy the report at https://www.orbisresearch.com/contact/purchase-single-user/7204251

Big Data and Analytics Market Segmentation:

 

Big Data and Analytics Market by Types:

Data Intergration
Data Storage
Data Presentation

Big Data and Analytics Market by Applications:

LoT
M2M  

The research then investigates the worldwide Big Data and Analytics market dynamics’ reaction to the significant consequences of the COVID-19 breakout. The research looks into the effects of an unprepared environment and significant delays in economic activity induced by the global deployment of continuous lockdowns. An unanticipated decline in market demand, along with frozen manufacturing capacity, ruined the global Big Data and Analytics market. The study report also demonstrates the considerable changes in the global Big Data and Analytics sector’s business structures induced by the epidemic. It also covers the challenges raised by governments’ extraordinary government actions in an attempt to minimize the epidemic’s horrific repercussions.

Furthermore, the worldwide Big Data and Analytics market report gives exact figures based on an in-depth investigation of the industry’s competitive situation. It rapidly collects essential industry data, forecasting the substantial contributions of the top market players to the commercial position of the global Big Data and Analytics market. The analysis ranks each competitor’s capacity in order of highest to lowest demand-to-supply ratio. The study assesses individual growth objectives and firm development strategies, as well as the infrastructural skills required for the global Big Data and Analytics market to maximize its growth potential.

  Do Inquiry before Accessing Report at: https://www.orbisresearch.com/contacts/enquiry-before-buying/7204251       

In this research, we supply critical answers.

• What effect would the release of a covid-19 vaccine or therapy have on the global Big Data and Analytics market?

• What new business practices may develop to sustain profitability in the aftermath of the pandemic?

• What significant government initiatives and policies have the world’s top Big Data and Analytics market nations implemented to promote the term’s growth or extension?

• How have major Big Data and Analytics market participants or corporations throughout the world dealt with pandemic-related issues?

About Us:

Orbis Research (orbisresearch.com) is a single point aid for all your market research requirements. We have a vast database of reports from leading publishers and authors across the globe. We specialize in delivering customized reports as per the requirements of our clients. We have complete information about our publishers and hence are sure about the accuracy of the industries and verticals of their specialization. This helps our clients to map their needs and we produce the perfect required market research study for our clients.

Contact Us:

Hector Costello
Senior Manager – Client Engagements
4144N Central Expressway,
Suite 600, Dallas,
Texas – 75204, U.S.A.
Phone No.: USA: +1 (972)-591-8191 | IND: +91 895 659 5155
Email ID: sales@orbisresearch.com   

Article originally posted on mongodb google news. Visit mongodb google news

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Podcast: Tracy Miranda on Secure Supply Chains, SBOMs, and SLSA

MMS Founder
MMS Tracy Miranda

Article originally posted on InfoQ. Visit InfoQ

Subscribe on:






Welcome to the InfoQ podcast

Daniel Bryant: Hey, everyone. Before we get into today’s podcast, I want to share that InfoQ’s International Software Development Conference, Qcon, will be back in San Francisco in the US from October 2nd to 6th. QCon will share real world technical talks from senior software development practitioners. You’ll learn about their successes, their failures, and you’ll also see how to apply emerging patterns and practices to address some of your challenges too. Learn more at qconsf.com. I’ll be there running the platform engineering track, and I hope to see you there.

Introductions [00:25]

Daniel Bryant: Hello and welcome to the InfoQ Podcast. My name is Daniel Bryant, and today I had the pleasure of sitting down with Tracy Miranda to talk about all things secure software supply chain. We look at the actual foundations of this, we look at things like software bill of materials, SBOMs, we also look at SALSA and other acronyms you may have heard in this space. And Tracy goes super deep into what those mean, and how to get started with dealing with secure supply chains.

I’ve known Tracy for many years now from my work at Chain Guard, from work at CloudBees, and I was super excited to have this conversation. So, welcome to the in InfoQ Podcast, Tracy. Could you introduce yourself to the listeners, please?

Tracy Miranda: Hi, Daniel. Thanks so much for having me. Yes, my name is Tracy Miranda, and Yes, I’m a technology leader and a veteran of open source, so I’ve worked at a number of different companies, including CloudBees, Chain Guard, the Continuous Delivery Foundation, and the common theme has always been open source.

What do you think is the biggest problem in the security space that developers face today? [01:19]

Daniel Bryant: Fantastic. Now, you and I talked on the podcast officially I think two years ago, and a lot has happened since then, Tracy. What do you think is the biggest problem in the security space that developers face today?

Tracy Miranda: Yes, and it’s a super interesting space and I’ve definitely been drawn into it more and more. And I think the big takeaway is that there isn’t one problem, and that’s the problem, that tackling security in software is actually solving multiple different problems all at the same time and just doing one won’t get you there. So Yes, it’s pretty tricky, because it’s a space where, if you try to simplify it or underestimate it, you’re just not going to get something effective.

Do you think DevOps has helped developers manage security more effectively over the years?  [02:00]

Daniel Bryant: Do you think DevOps and those kind of approaches have helped over the years? Because now we’re seeing, what, I think it’s 13, 15 years DevOps has been around. Is it making a difference to the collaboration, say, across the teams in regards to security?

Tracy Miranda: I think it’s really interesting with DevOps and folks tend to talk a lot about breaking down silos between teams, and you’ve got that shift left phrase, which I’m not a fan of, but it highlights the fact that things are moving earlier in the pipeline. But security actually has been pretty resistant to a lot of those patterns, it’s been super hard to shift left security as such. It’s still seen as a very top down type of approach. Security teams and infrastructure teams aren’t as well jelled as they need to be to support each other effectively.

I think we’re still in the early days, I think the whole DevOps and we’ve had the DevSecOps iteration, but there’s still a long, long way to go on that road. But the good thing is that, we do seem to be heading, as an industry, in the right direction, albeit maybe a bit slower than we need to be.

How has platform engineering impacted software security implementations? [03:13]

Daniel Bryant: No, I think that’s IT in general. We are generally going in the right direction, but we like to loop around, and what was it? History doesn’t repeat, but it rhymes quite a lot. And when I see some of these things pop up, I’m like, “Oh, we’ve had that before.” But before we dive into some of the supply chain stuff, Tracy, I did want to briefly ask about platform engineering. So, one thing I’ve seen with platform engineering, and particularly with[ Team Topologies, my buddies Matthew and Manuel, is really force folks to think about decentralized versus centralized ops. So, some responsibilities go onto the platform team, some responsibilities are going to get pushed out, decentralize their developers.

Have you seen any of that emerging? And I’d love to get your thoughts on, is platform engineering a thing in the security community?

Tracy Miranda: Yes. No, absolutely. I think the way people are thinking about platform engineering is the right move forward, and a lot of the companies who are taking security seriously, it tends to be those platform engineers who are the ones looking at things, they’re ones saying, “Okay, we are responsible for pulling in various bits of open source and turning it into this platform. How do we make sure that it’s going to be secure? How do we make sure it’s not going to be compromised by a supply chain attack?” So Yes, I think definitely security platform engineering if you like…

Daniel Bryant: The next level.

Tracy Miranda: Good approach. But Yes, the intersection of those worlds is where some of the most interesting work is happening at the moment.

What’s the most interesting space to focus on with software supply chains? [04:29]

Daniel Bryant: Fantastic. So, you mentioned about supply chains there, Tracy, I’d love to get your thoughts on, is that the most interesting place to focus at the moment? Because we hear a lot about SBOMs, I’m sure we can dive into that later on as well, but Yes, why has the software supply chain caught security attention, at least, of developers at the moment?

Tracy Miranda: Yes, it’s really interesting, because for a long time, there’s a lot of focus on application security, and you can almost say we did a decent job in different communities, that it became harder and harder to attack applications, and actually the supply chain then became the weakest link. So, you would have people just not really protecting their CICD systems, not treating them in the same way they would with production system. So, this became a real vulnerability, and then there were a couple of really famous attacks, like the SolarWinds compromise as probably one of the big flash points that triggered a lot of saying, “Okay, we need to take this seriously.”

And then the more people started looking at it and saying, “Okay, let’s investigate the threat models around your CICD, or your supply chain,” the more it was like, “Oh, dear. This is bad.” And the potential number of things that could happen, it’s quite a big list. And we are starting to see the chickens come home to roost on some of the bad practices around securing your CICD pipeline, and also where and how you’re getting open source that you’re pulling into your products and applications.

Can you explain what SBOMs and SLSA is? [05:54]

Daniel Bryant: Yes, great. So, we do see a lot of mention of software bill of materials, SBOMs, and I know you and I were talking off mic, a lot of folks says SBOMs, SALSA, it’s all these acronyms, and I know we all love acronyms, but could you break down some of those things for us and help us actually understand why should I, as a developer, be interested in a software bill of materials?

Tracy Miranda: Yes, absolutely. Like I said, we’re still in the early days of trying to figure out what does an ideal secure stack look like. And there’s a number of really interesting technologies that are emerging, and each are trying to tackle different spaces. So, one of my favorites in the last few years has been the Sigstore project, which is like the new version of GPG and really gives a fresh developer oriented view to software signing. So, absolutely look at that, Python and PM have all adopted it, safe to say that’s going to be one of the building blocks.

And then you mentioned SLSA, and we’re seeing that resonate. It’s a framework which you can use to think about the different threats and methodically work through the different ways to secure your supply chain, so it’s a really nice, focused framework that gives you a starting point and some different levels to work through. So, that’s pretty useful. And then, maybe the third S is SBOMs, which is totally really, really interesting. This SBOMs get a lot of buzz, everybody wants to know about them, there’s a lot of hype associated with them. And Yes, we could spend a lot of time talking about them, but for those not familiar, it’s a software bill of materials, and it’s looking to be a format for which you can describe exactly what components go into a piece of software.

And if you think about it, it’s a pretty fundamental problem. If you go and talk to companies, and if you go and talk to open source projects and you say, “Can you tell me what software you’re running and where you got it from?” You think that would be a pretty basic question. It turns out it’s super hard and it’s super difficult, and all these big companies and small companies actually don’t really know what they’re running, and they don’t know where it came from, and they don’t know whether it’s liable to specific vulnerabilities. And the Log4j vulnerability, that highlighted that in a really stark way, that nobody’s got this full inventory of what they’re running and it’s a major, major problem.

I hear the US government is getting involved with software supply chains. Can you share more? [08:13]

Daniel Bryant: I’d love to dive in, perhaps, how folks should get started with that kind of thing, Tracy, but first you and I, off mic, were talking about adoption rates of these things and you mentioned the US government, the Department of Homeland Security, is getting involved in this and it’s not often we see government agencies get involved with software engineering, at least not yet. So, I’d love to know a bit more about that. What’s the Department of Homeland Security doing around relation to SBOMs?

Tracy Miranda: Yes, so there’s a famous executive order, I think it’s two or three years ago now, and this was the response to cybersecurity, and it’s one of the first executive orders that mentioned open source and I think it mentions it about four times. But part of the crux of it was that, that order really honed in on software bill of materials as a key part of the solution, so the base of the stack. And it tells us a couple of interesting things. One side is that, the US government is really seeing that as a fundamental piece of the puzzle and really is betting that we need innovations and we need developments there, and that’s what’s going to be the key to solving things, whether or not industry agrees with that.

It has been pretty controversial and there have been mixed reviews to that, but Yes, if I can share a bit more. So, it’s not just an order, but the US government has taken it one step further and they’re actually conducting a pretty interesting experiment. You could say it’s a 1.4 million US dollar experiment. The Department of Homeland Security actually set up an innovation program where invited companies to apply for funding for SBOM projects in open source. So, they’re putting their money where their mouth is, and so they said, “Okay, we want people to develop technology and do it in open source, and it’s all got to move the state of the art of SBOMs forward.”

Now, the really interesting thing that they did with this grant, is that they required every company that applied and would be successful, was obliged to work on a common tool. And specifically, one of the tools is a multi-format SBOM translator. So, it was like, “Okay, we’re going to give you 200k to write some tools, but we all want you to work and collaborate on a tool that’s going to solve the SBOM format,” was this two main formats, and it’s a bit of a sticking point at the moment, which format do you even start with?

So Yes, not all these companies are that familiar with open source. There were seven companies awarded things in total, and now they’re all going to work together and come together and work on open source tooling. And actually, the first version is already out, it’s called Protobom. And Yes, it’s aiming to be like the Switzerland of SBOM format, using protocol buffers, and it’s a super interesting project to watch. I know Adolfo Veytia and John Speed Meyers, two of my former colleagues, are doing some great work with the community and leading people there. So Yes, definitely one I’m keeping an eye on.

Are government contractors collaborating effectively? [11:09]

Daniel Bryant: Fantastic. As you mentioned about the US government, I certainly have flashbacks to the healthcare.gov debacle. As much as I very much admire President Obama’s direction there, there was famous stories at various conferences talked about the challenges of getting all these different teams working together, but you’ve said so far, the independent folks that have come together around this format, they are actually collaborating, they are making progress.

Tracy Miranda: Yes, so it’s interesting to see there is a first working version and it seems to be progressing steadily. So Yes, fingers crossed this could be one that actually pays off and is good for the wider ecosystem. So definitely, Yes, one to watch.

How can listeners contribute to this work? [11:42]

Daniel Bryant: Fantastic. Can interested listeners get involved, Tracy? Can they even just watch what’s going on, but can they contribute in any way?

Tracy Miranda: Absolutely. So, the idea is that they do want to build this and open it up in a sustainable way. So, the cohort has put together some community guidelines, they are developing it as open source, and Yes, contributions are welcome. So Yes, I can get you the URL and I’m sure they’d welcome more eyes on it and people getting involved. And I think the URL is pretty fun, it’s on github.com, and it’s bomsquad, B-O-M.

Daniel Bryant: Nice.

Tracy Miranda: And Protobom is the project itself. So Yes, I encourage folks to check it out and I’m sure they’d welcome help and involvement.

Daniel Bryant: I must confess, I had not heard of that project, so that sounds fantastic. You mentioned in the conversation there about two different formats. I have bumped into that when I’ve been playing around with SBOMs, with Docker, because I know Docker’s got an integrated command. I love Buildpacks, I was messing around with Buildpacks and trying to generate SBOMs, that kind of thing. I did bump into some of this.

Could you briefly outline the two competing SBOM formats? [12:40]

Could you briefly outline for the listeners what the two competing formats are, and is it a VHS Betamax situation? Will there be a clear winner, do you think?

Tracy Miranda: Yes, so the two main ones are SPDX, and folks might know that as the format, I think it’s software package data exchange, so it came from the licensing world. And then CycloneDX is the other one. I will add, those are the two main formats, but there’s also specific versions of them, and they also have encoding. So, even with those formats, there’s a lot of variability. And it’s funny, because the last time I was on the podcast, my thing is interoperability and simplifying things. And this is one space we don’t want to get that wrong. We think the two different things have different approaches, and some people will say CycloneDX is simpler if you’re getting started, but SPDX has a wealth of metadata that allows you to do rich specifications.

But I think if you take a step back, they’re 80% very, very similar. And it’s not great for people in the industry to come in and try to deal with the inventory problem, try to deal with software supply chain, and they’re stuck at the first hurdle. And unfortunately, part of it ends up in a bit of religious format, was something we totally need to avoid. And I think that’s why folks are excited about Protobom, because I think it will sidestep a lot of that. That’s the hope. Hopefully it doesn’t just put out yet another format.

Daniel Bryant: I’m thinking of the XKCD cartoon where there’s like, “We’ve got 17 plus one standards.” But no, I think it’s fantastic, it’s good aspirations. And it’s something I’ll definitely check out after the call and I’ll have a look around. Protobuf is obviously a fantastic spec, so that is a good start to be building from, right?

Tracy Miranda: Yes. And I think it’s fair to say, if we think about where we are with SBOMs today and people use the crawl, walk, run analogy, definitely as an industry in a crawl stage. Very few people are producing them. Even if they’re producing them, they’re hardly spec compliant, and it’s a long way to go to making them useful. But that being said, I’m a firm believer that you do want an interoperable spec that everybody can use and subscribe to, so I’m hopeful it can be a good bottom of the stack for software supply chain security.

How can developers get started with creating SBOMs? [14:45]

Daniel Bryant: Yes, fantastic. In my little world with Kubernetes, the YAML specs have actually enabled quite a bit of interesting foundations to build upon. If we can all agree on a foundation of a stanza of a spec, it just means that we can focus on more interesting problems. So, I think it’s fantastic. Just dialing it back a little bit, Tracy, as a developer, if we’re looking to get started with SBOMs, have you got any recommendations, any sites, books, tools to play around with? How should I, as a developer that’s interested in this, how should I start playing around with this stuff?

Tracy Miranda: I think it depends a little on maybe which ecosystem you’re in. I think if you’re in the Go Ecosystem, you’re well set up there, Go’s a really lovely language and it provides you a lot of the metadata around building up SBOMs and fun tools, like the Cobil tool will spit you out and SBOM is part of the build, which is really nice. But Yes, in general, I think picking one of the different formats and subscribing to that ecosystem. If you’re in the cloud native space, I will say check out the bom tool, which is the tool like Kubernetes uses to produce its SBOM, and I think a few other cloud native tools use that, so I think that’s a really good starting point to play around with that.

How can developers get leadership buy-in for implementing SBOMs? [15:51]

Daniel Bryant: Fantastic. And the next question I jump to these days is, it’s easy to do bottom up adoption. How do I get that top down buy-in? How do I as a, say, engineering manager, as a leader, get the exec buy-in? Because you need that. For this organization-wide security approach, you need that exec buy-in. I know this is a big question, but have you got any advice on how to get this SBOM adoption and what benefits offers to the leadership, to the business?

Tracy Miranda: One of the things with SBOMs, part of the controversy around it, is that there’s a lot of talk of regulations and top-down requirements being mandated, certainly by the US government or even other governments, and that’s received a lot of pushback. And I’ll say it’s limited and it’s a bit of a chicken and egg situation. You want to require people to have SBOMs, but the tooling and the standards and the things makes it really difficult.

Yes, but I think just going back to the fundamental problems organizations need to solve, just thinking about the fact you just don’t know, you can’t run that software inventory. I think highlighting that, that’s so fundamental. There’s a couple of organizations, I think, who will move forward and certainly the big cloud providers, I think, will start leading the way. Then I’m hoping it’ll be a case of using that FOMO just to show what other people are doing with SBOMs and just pushing along and having everybody start producing them.

Can you share a case study about an organization adopting SBOMs? [17:12]

Daniel Bryant: We were talking off mic, Tracy, about a very interesting case study you had with eBay and SBOMs. I’d love to hear a bit more about that, if that’s possible, please?

Tracy Miranda: About a year ago, I had the pleasure of speaking to Justin Abrahms at eBay, and just learning more about their SBOM strategy and the practical considerations they were facing. And it was a super fascinating conversation. So, what they shared was, SBOMs are a key part of their wider software supply chain security initiative, and they have a code base which multiple languages, so Java and JavaScript, and JavaScript is always something I have a few more concerns around.

So, a couple of things they shared. One was that formats didn’t really matter to them. They were able to generate SBOMs in multiple formats, both SPDX and CycloneDX. And as far as they were concerned, the file sizes were pretty small. And they had two key consumers, so one was the security team, which I think lots of people expect and are familiar with, and they wanted to use the SBOMs for vulnerability management.

But the other one, which I hadn’t come across before, was they saw as an internal consumer was their OSPO, so their open source program office. And the OSPO was interested in using the SBOMs to understand which dependencies they were reliant on, and then doing health checks on those, and maybe thinking about, “If we’re using this open source project, is it healthy? Should we help sustain it? Should we be contributing?” So Yes, I thought that was a pretty fascinating way to use SBOMs. And in general, they also did a lot of work on SBOM quality, and that was pretty interesting.

What is “SBOM quality”? [18:45]

Daniel Bryant: I’d love to know a bit more about SBOM quality, actually, can you break that down for us?

Tracy Miranda: So, there’s a lot of questions about how useful are SBOMs and what is the quality. Unfortunately, in the case of eBay, they found that it was pretty poor, that even the SBOMs, they could find out they weren’t even spec compliant. But another aspect of it I find, and this is more general, is that a lot of the SBOMs we have generated today are what I would call guess BOMs.

Daniel Bryant: Oh, no.

Tracy Miranda: Yes. They’re generated by scanner tools, which are trying to introspect the final artifact.

Daniel Bryant: Oh, interesting. Yes, yes.

Tracy Miranda: Yes. And trying to come up with complicated rules to say, “I think this is what it’s made up for,” which is just not really useful and there’s a bunch of research on how this just leads to all sorts of confusion, and you might even have WordPress artifacts which don’t say they have WordPress in them, or just totally weird things because the scanners can’t always pick them up. So, I think one of the things that’s going to be important for the industry, is if you want to take SBOM seriously, they really have to come from the base tools themselves, so the build tools, and either by capturing that build information or being able to generate them.

And again, the Go Ecosystem is a good example of an area where a lot of that data is captured and you can make pretty accurate SBOMs for Go. But yes, I think a lot of other ecosystems may need to consider, how do we do that? And as an industry, I think we need to be thinking about more, how do we take a step back and stop trying to generate these guess BOMs and thinking they’re going to get us there? But go back to basics and look at our fundamental tools and ecosystems, and work out how we can propagate that information through the compilers perhaps even.

How do SBOMs relate to application dependencies and container/OS libraries? [20:29]

Daniel Bryant: That’s our final question. Something rattled around my brain a little bit, because my background is very much Java and then a little bit of Kubernetes and Docker and that kind of thing, what’s the interplay there between the language and, say, the packaging format, which are deploy applications? Do the SBOMs take into account both things, because I’ve got obviously libraries in my Java app and I’ve got libraries in the OS, on the actual container. I’d love to know a bit more about the interplay there.

Tracy Miranda: Yes, and I think what you’re touching on, one of the challenges with SBOMs is all related to naming. So, how do you identify a specific package? Is it a library, is it something else? What’s its version? Is it the Log4j package, which has the vulnerabilities or not? And that gets into another can of worms of different formats for software identification, and a couple of different approaches which tackle things differently.

So, while it seems, on the surface, maybe SBOMs should be a simple problem, at the end of the day, it’s a big data problem. You’ve got information about the naming, information about the packages, information about where it came from, and we really need that to be more structured and to be able to be used in a more powerful way. And we’re not there yet, but I think I’m hopeful that we can stop operating at a pretty low level and start getting to just more sophisticated tooling and structure. And Yes, just treat SBOMs like the big data problem it is.

Daniel Bryant: You mentioned big data there, Tracy. I’ve got to ask. Is there any place for AI here? I always hate myself for saying it, but you know what I mean, because you want to be careful, you don’t want to probabilistically assume, because you mentioned the guess BOMs. So, LLM’s probably out, for example, but do you see any future for AI to be involved in this space?

Tracy Miranda: Yes, if I step back to the wider software supply chain, I think that there are a few places for AI. I think we have to be careful because, in general, AI is not going to be a silver bullet. If you think about, we traditionally have not been good at securing software, so what’s all this AI being trained on?

Daniel Bryant: Yes, that’s a good point. That’s a really good point.

Tracy Miranda: But there’s some interesting projects, and I think the Google security team, the GOSST team, they were looking at using AI for open source fuzzing and maybe doing that at scale. And so, that’s super fascinating. So, I do think there will be some interesting applications, but Yes, definitely not across the board and there’s no silver bullets, magic amplification.

Daniel Bryant: Yes, it makes sense. I definitely heard your message here of foundational and was it the crawl, walk, run, totally makes sense. With something like security, we need to be super thorough in this kind of approach, and AI sometimes is a bit more fun rather than thorough. So, I totally hear you on that. It’s been fantastic, Tracy, we’ve covered the world there in terms of SBOMs, why we should do it, and how we should do it, these things. Is there any final comment there you’d like to make? Anything I’ve missed at all?

Tracy Miranda: No, I think it’s a gray area. I do think software security is a bit of an existential threat, especially in the world of open source. So, I think it’s as boring as it might seem, or as painful as it might seem. I do encourage everyone to get involved to start asking questions and to start pushing for the right kind of change in the right direction. And I’m a strong believer that open source communities have a way of coming together and tackling really big problems, so I’m confident that can happen in this case.

Getting in contact with Tracy [23:41]

Daniel Bryant: Superb, Tracy. If folks want to reach out, get involved, chat more with you, where’s the best place to find you online?

Tracy Miranda: Yes, just find me either on LinkedIn, I’m Tracy Miranda. Or on Twitter/X, I’m also there too.

Daniel Bryant: Perfect. Thanks for your time today, Tracy.

Tracy Miranda: Thanks. Yes, pleasure to be here. And Yes, love talking about software security.

About the Author

.
From this page you also have access to our recorded show notes. They all have clickable links that will take you directly to that part of the audio.

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.


Azure Launches Free Playground for WordPress on App Service

MMS Founder
MMS Sergio De Simone

Article originally posted on InfoQ. Visit InfoQ

One year after introducing WordPress on Azure App Service, Microsoft has started offering a free hosting tier for developers to explore with WordPress on Azure without incurring any costs (almost).

The new WordPress playground relies on App Service F1 free tier and on Azure Database for MySQL free trial and may entail charges depending on your subscription type to those services.

In particular, while App Service F1 will not generate any cost, database usage is chargeable for “pay as you go” plans or when the usage limit of 750 hours per month for 12 months is exceeded. So, in order to ensure they will not pay for the WordPress playground, developers should monitor and track their database usage.

While not suitable for production deployment, says Microsoft, the playground will help developers understand if the service fits their needs. This is mostly due to some limitations to both the WebApp server and the database server. Specifically, the F1 free tier includes up to 60 CPU minutes per day, 1 GB RAM, and 1 GB Storage, while the database free trial is limited to 1 vCores, 2 GB RAM, 32 GB storage, and 396 IOPS.

In their announcement, Microsoft emphasizes the optimizations and additional features they built into WordPress for App Service, including easy deployments, inbuilt Redis cache, and accelerated WP admin thanks to local storage caching.

At the same time, Microsoft also brings the attention to a few limitations besides those listed above for free tiers, such as services line CDN, Front Door, Blob Storage, and Email Service not being included in the free plan, and local storage being limited to 500MB maximum. Additionally, the “Scale out” and “Always on” capabilities are not supported, nor is VNET, which enables creating virtual networks to improve security.

Azure App Service is a service that enables hosting web applications, REST APIs, and backends written in languages such as .NET, .NET Core, Java, Ruby, Node.js, PHP, and Python. It offers auto-scaling and high availability, support for both Windows and Linux, and enables automated deployments from GitHub, Azure DevOps, or any Git repo.

About the Author

Subscribe for MMS Newsletter

By signing up, you will receive updates about our latest information.

  • This field is for validation purposes and should be left unchanged.