Can the Open Source Community Save Europe from the Cyber Resilience Act?
7 minute read time
Examine the open source community's response to the EU Cyber Resilience Act, and its potential consequences for the future of innovation & collaboration.
Read More...
EU Cyber Resilience Act: Good for Software Supply Chain Security, Bad for Open Source?
10 minute read time
The Cyber Resilience Act is the European Union's proposed regulation to combat threats affecting any digital entity. What does that mean for open source?
Read More...
Inevitable: Earthquakes and Exploits
3 minute read time
Earthquakes and open source vulnerabilities are both inevitable, unpredictable, and can be catastrophic. Sonatype's Mike Hansen talks about what earthquake preparedness can teach us about open source
Read More...
What the TPG-led $80M Investment Means for the Future of Sonatype and the DevSecOps Movement
2 minute read time
Sonatype has raised an $80 million round of growth financing led by TPG Capital to fuel global growth requirements as automated open source governance goes mainstream.
Read More...
Deja Vu All Over Again - Another New Apache Struts Vulnerability (CVE-2018-11776)
2 minute read time
Another remote code execution vulnerability in Apache’s Struts2 Framework was disclosed on August 22, 2018. Everything you need to know and how to find out if you're affected.
Read More...
Learning in the Modern Enterprise – going to DevOps Enterprise Summit London with an open mindset
2 minute read time
DevOps Enterprise Summit (DOES) London is taking place next week. Join Sonatype and Mirco Hering to learn more about DevOps in the Modern Enterprise,on Monday June 25th.
Read More...
I Am A Serial Cryptominer: An Open Letter to Software Developers
5 minute read time
An open letter to the DevOps community from a cryptocurrency miner.
Read More...
Secure By Design: Preparing for GDPR Should Begin With Software
4 minute read time
To ensure GDPR compliance, appropriate safeguards must be put in place across the entire software lifecycle.
Read More...
WSJ on Struts: Companies Still Downloading Flaw Linked to Equifax Breach
2 minute read time
The Wall Street Journal discusses open-source governance, Struts and how companies are still downloading the flaw that led to the Equifax Breach
Read More...