Octopus Scanner compromises 26 OSS projects on GitHub
4 minute read time
The Octopus Scanner malware compromised 26 open source projects hosted on GitHub in a new form of software supply chain attack targeting NetBeans projects.
Read More...
What Developers Need to Know About WhatsApp's Recent Security Dilemma
3 minute read time
Sonatype issues an Advisory Deviation Notice for CVE-2019-11932, a vulnerability that exploits processor memory and recently affected WhatsApp.
Read More...
The Dot Zero Conundrum and the New Frontier of Securing Open Source
3 minute read time
Sonatype is combining a new type of behavioral analysis with machine learning and proprietary data, creating early warning capabilities to detect malicious.
Read More...
Anatomy of the RubyGems ‘rest-client’ Hack, and Getting Creative About Open Source Security
3 minute read time
Last month, the RubyGems strong_password component was breached and injected with malicious code.
Read More...
Nexus Intelligence Insights: CVE-2019-13354: 'strong_password' embedded malicious code, RubyGems
4 minute read time
In this month's Nexus Intelligence Insights, we're covering CVE-2019-13354: strong_password, an embedded malicious code vulnerability in RubyGems.
Read More...