The “Big Hack” That Actually Happened - Chinese Military Implicated in Equifax Breach
3 minute read time
Members of the Chinese Military were implicated in the attack on Equifax's software supply chain. It's time to take software supply chain hygiene seriously.
Read More...
Three DevSecOps Lessons Drawn From Conversations With 45 CISOs
3 minute read time
CISOs reduce risk and significantly improve an organization's IT security posture by shifting more resources to the beginning of the digital supply chain.
Read More...
Sonatype Nexus is Rising Above the Swamp
3 minute read time
With Vista by our side, Sonatype's direction is clear, and Nexus is rising above JFrog Artifactory. We invite you to test the Nexus difference.
Read More...
In the Dark about Software Supply Chain Vulnerabilities
2 minute read time
The Barium attacks, revealed earlier this month, highlight new, pervasive tactics that are exceptionally dangerous.
Read More...
At Sonatype, we’ve spent the past 10 years engineering and delivering a variety of tools and services to help the global open source community accelerate the.
Read More...
Hygiene for Open Source Software Is Now a PCI Requirement
2 minute read time
PCI’s new Secure SLC outlines security requirements to ensure payment software adequately protects the integrity and confidentiality of payment transactions.
Read More...
Application Security Risk in 2019: It's All About The Supply Chain
5 minute read time
Cyber criminals are intentionally planting vulnerabilities directly into the global supply of open source components.
Read More...
House Oversight Report: Equifax Open Source Breach Was Entirely Preventable
3 minute read time
Equifax is not alone. In the last decade, there have been hundreds, if not thousands, of companies have suffered the exact same, easily preventable, mistake.
Read More...
Who Cares if Supermicro Happened. Supply Chain Attacks are Real and It’s Time to Pay Attention
3 minute read time
Technology supply chain attacks are happening in the wild, and whether or not the Supermicro story is real, it should be a wake-up call for all of us.
Read More...