News and Notes from the makers of Nexus | Sonatype Blog

Sonatype Stops Software Supply Chain Attack Aimed at the Java Developer Community

By Sonatype Security Research Team on January 13, 2021 vulnerabilities

Sonatype removed 3 malicious open-source Java components from Maven Central targeting popular software releases, stopping a software supply chain attack.

Read More...

Malicious Code Injection Strikes Again as npm Foils $13M Cryptocurrency Theft

By Derek Weeks on June 07, 2019 vulnerabilities

The latest attempt at a cryptocurrency heist demonstrates how open source software components are used throughout the cryptocurrency ecosystem.

Read More...

House Oversight Report: Equifax Open Source Breach Was Entirely Preventable

By Matt Howard on December 10, 2018 devsecops

Equifax is not alone. In the last decade, there have been hundreds, if not thousands, of companies have suffered the exact same, easily preventable, mistake. If you want help eliminating open source

Read More...

An Open Discussion on Open Source Review Boards

By Derek Weeks on March 17, 2014 Sonatype Says

The recent FS-ISAC whitepaper, “Appropriate Software Security Control Types for Third Party Service and Product Providers”, reveals the majority of internal software applications created by financial

Read More...

PRODUCTS

Powered by Nexus IQ

Nexus Repository Manager

Research and Free Tools

Pricing

No-Pressure Sales

SOLUTIONS

For Professionals

For Industries

RESOURCES

Content

Sonatype Partners

Community

Upcoming Events

COMPANY

Sonatype Blog

Sonatype Stops Software Supply Chain Attack Aimed at the Java Developer Community

Malicious Code Injection Strikes Again as npm Foils $13M Cryptocurrency Theft

House Oversight Report: Equifax Open Source Breach Was Entirely Preventable

An Open Discussion on Open Source Review Boards

Products

Security Research

Solutions

Resources

Company