White House National Cybersecurity Strategy: Landmark Action for a Critical Threat
5 minute read time
The Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment.
Read More...
Is Cyber Liability Insurance a Moral Hazard in the US?
9 minute read time
Sonatype CTO and co-founder, Brian Fox, shares his thoughts on the developing role of cyber liability insurance in software supply chain management.
Read More...
Make Sure Your Company is Prepared for Evolving Software Liability Regulations
13 minute read time
Organizations should understand changes to liability and government regulation, and have the proper tools in place to protect their software supply chains.
Read More...
The Shifting Landscape of Open Source Supply Chain Attacks - Part 3
12 minute read time
Brian Fox shares insights on who’s responsible for the security of software supply chains, and how orgs can minimize impact on efficiency and speed.
Read More...
The Shifting Landscape of Open Source Supply Chain Attacks - Part 2
11 minute read time
Sonatype's Brian Fox delves into how bad actors and cybercriminals are attacking the software supply chain, and how cyberattacks continue to evolve.
Read More...
The Shifting Landscape of Open Source Supply Chain Attacks - Part 1
8 minute read time
A deep dive into how modern supply chains manage problems, and how companies looking to secure their software supply chains can learn from their mistakes.
Read More...
EU Cyber Resilience Act: Good for Software Supply Chain Security, Bad for Open Source?
10 minute read time
The Cyber Resilience Act is the European Union's proposed regulation to combat threats affecting any digital entity. What does that mean for open source?
Read More...
Sonatype CTO shares thoughts following conversations, led by OpenSSF, where industry and government came together to discuss securing open source software.
Read More...
Why Sonatype is Acquiring MuseDev
5 minute read time
Today, Sonatype acquired MuseDev, a developer-first source code analysis platform and unveiled the world’s first full-spectrum platform for strengthening cloud-native software supply chain
Read More...