What is the OWASP Top 10?
7 minute read time
Discover the significance of OWASP in cybersecurity – What is OWASP and why it is vital for developers and organizations? Dive deeper with Sonatype.
Read More...
Open source risk management: Safeguarding software integrity
6 minute read time
Explore open source risk management as the identification and mitigation of security, compliance, and operational risks with using open source software
Read More...
Going online with the OWASP Vulnerability Management Guide Working Group
6 minute read time
The OWASP Vulnerability Management Guide (OVMG) project seeks to simplify vulnerability management into repeatable and scalable cycles.
Read More...
October is Cyber Security Awareness Month. Developers Are Some of Our Best Guardians.
3 minute read time
As open source software grows, developers play a crucial role ensuring that cyber security threats are prevented, mitigated, and repaired.
Read More...
Software Composition Analysis: A Matter of Perspective (and Experience)
2 minute read time
The SCA market is young - leaving everyone wrestling with a critical question: is it a security-centric, developer-centric, or a legal-centric endeavor? At.
Read More...
Application Security Risk in 2019: It's All About The Supply Chain
5 minute read time
Cyber criminals are intentionally planting vulnerabilities directly into the global supply of open source components.
Read More...
House Oversight Report: Equifax Open Source Breach Was Entirely Preventable
3 minute read time
Equifax is not alone. In the last decade, there have been hundreds, if not thousands, of companies have suffered the exact same, easily preventable, mistake.
Read More...
Inevitable: Earthquakes and Exploits
3 minute read time
Earthquakes and open source vulnerabilities are both inevitable, unpredictable, and can be catastrophic.
Read More...
WSJ on Struts: Companies Still Downloading Flaw Linked to Equifax Breach
2 minute read time
The Wall Street Journal discusses open-source governance, Struts and how companies are still downloading the flaw that led to the Equifax Breach
Read More...