Securing software supply chains and dependency confusion — An industry perspective
29 minute read time
We sat down with experts from The Linux Foundation, Atlantic Council and Sonatype's own CTO to discuss recent software supply chain attacks, dependency.
Read More...
The SolarWinds software supply chain attack: How developers can protect applications
8 minute read time
The SolarWinds software supply chain attack has made it clear that open source developers need to act now and intelligently manage third party dependencies to.
Read More...
Breaching the U.S. government through software supply chains: Tracing the SolarWinds exploit upstream
3 minute read time
The U.S.
Read More...
Gitpaste-12: A dozen exploits that silently lived on GitHub, attacked Linux servers
5 minute read time
Gitpaste-12, a worming botnet, is extremely versatile in its advanced capabilities as it leverages trustworthy sites like GitHub and Pastebin to host itself.
Read More...
Turkish banking agency mandates better software supply chain hygiene
4 minute read time
The Banking Regulation and Supervision Agency has introduced new standards to protect the Turkish citizenry and require banks to more aggressively protect.
Read More...
NIST: Adopt a Secure Software Development Framework (SSDF) to mitigate risk of software vulnerabilities
2 minute read time
NIST recommends a SSDF framework to assess open source component cybersecurity risks, including an SBOM and automated security controls in the SDLC.
Read More...
Managing Nexus API Using Jenkins X
6 minute read time
Steve Boardwell demonstrates how to create custom repositories in your Jenkins X managed Nexus server, and what is possible with the Nexus scripting API.
Read More...
Why Manual Verification Still Matters
4 minute read time
We continuously hear the benefits of automation. Jeroen Willemsen explains why we still need to perform manual checks.
Read More...
“Each for Equal”: 2020 International Women’s Day Theme Resonates in DevSecOps Because It Is a Business Issue
4 minute read time
Studies demonstrate a variety of immediate and ongoing business advantages accrued by gender diverse teams.
Read More...