2021 State of the Software Supply Chain: Open Source Security and Dependency Management Take Center Stage
3 minute read time
As Open Source Continues to Fuel Digital Transformation, Sonatype's 2021 Software Supply Chain Report Reveals Important Trends
Read More...
Kaseya Ransomware: A Software Supply Chain Attack or Not?
5 minute read time
As companies scramble to address and resolve this devastating attack, we look at what makes a supply chain and what it takes to address upstream attacks.
Read More...
What Does NIST’s Definition of Critical Software Mean to You?
3 minute read time
NIST's definition of Critical Software in relation to the 2021 Cybersecurity Executive Order may seem broad, but its immediate implementation is limited.
Read More...
Biden’s Cybersecurity Executive Order: Everything You Need to Know You Learned in Kindergarten
4 minute read time
Biden's Cybersecurity Executive Order, set to change secure development processes in the US, is actually quite simple to understand. You just have to go back to kindergarten.
Read More...
Biden Executive Order on Cybersecurity Calls for Enhanced Software Supply Chain Security
2 minute read time
Biden's Cybersecurity Executive Order mandates software supply chain security and secure development practices, including creating a software bill of materials for all applications.
Read More...
Sonatype + Muse: How Improved Code Quality Complements Enterprise SAST
3 minute read time
MuseDev, Sonatype's innovative code analysis platform, is highly complementary to enterprise SAST tools like Fortify that surface a wide breadth of deep security issues that Muse doesn’t provide.
Read More...
DevSecOps Leadership Forum: 500 Innovators Learning From Shared Experiences
5 minute read time
This is a recap of experiences and insights shared at the 2020 DevSecOps Leadership Forum. On demand recordings of the event are now available for free.
Read More...
DevSecOps Leaders: The Conversation Continues Online, May 7th
3 minute read time
Learn from DevSecOps experts May 7th to align software, security, and operations resources so organizations innovate faster with less risk.
Read More...
Sonatype: Fighting COVID-19 Together
1 minute read time
Sonatype is providing free Nexus software to qualifying organizations working to develop innovative software solutions to help fight COVID-19.
Read More...