Malware Monthly - January 2023
11 minute read time
January 2023's Malware Monthly covers malware that rejects virtual machines, Linux crypto miners, evasive variants of RAT mutants, and more.
Read More...
Make sure your company is prepared for evolving software liability regulations
13 minute read time
Organizations should understand changes to liability and government regulation, and have the proper tools in place to protect their software supply chains.
Read More...
Malicious ‘aptX’ Python package drops Meterpreter shell, deletes ‘netstat’
4 minute read time
Sonatype identified malicious Python packages on the PyPI software registry that carried out multiple nefarious activities.
Read More...
Are unnecessary vulnerabilities polluting your software supply chain?
7 minute read time
As malicious software supply chain attacks continue to evolve, so do the ways that bad actors exploit vulnerable libraries.
Read More...
Sonatype's 2022: A year-end recap
9 minute read time
2022 was quite the year. Sonatype continued to push the boundaries of open source, gave back to our communities, expanded our team, and so much more.
Read More...
Sonatype Lifecycle and Firewall now available in the cloud
4 minute read time
Sonatype’s new cloud offer means customers looking to scale and secure their software development lifecycle can do so with less maintenance and infrastructure.
Read More...
The shifting landscape of open source supply chain attacks - Part 3
12 minute read time
Brian Fox shares insights on who’s responsible for the security of software supply chains, and how orgs can minimize impact on efficiency and speed.
Read More...
The shifting landscape of open source supply chain attacks - Part 2
11 minute read time
Sonatype's Brian Fox delves into how bad actors and cybercriminals are attacking the software supply chain, and how cyberattacks continue to evolve.
Read More...
The shifting landscape of open source supply chain attacks - Part 1
8 minute read time
A deep dive into how modern supply chains manage problems, and how companies looking to secure their software supply chains can learn from their mistakes.
Read More...