Scale developer security with expanded Sonatype Platform features
5 minute read time
New Nexus platform features make it even easier for developers to scale security and block open source vulnerabilities from entering the software supply chain.
Read More...
PyPI flooded with 1,275 dependency confusion packages
6 minute read time
Popular Python open source software repository, PyPI has been flooded with over 1,200 dependency confusion packages by the same actor.
Read More...
How large organizations can easily scan for Log4j vulnerabilities
7 minute read time
Large orgs looking for the Log4j vulnerability in 1000s of apps, can be more effective and efficient with Nexus Lifecycle and Easy SCM Onboarding.
Read More...
New Sonatype Nexus Repository Visualizer provides insights into Log4j usage
4 minute read time
Vulnerable Log4j components are still in active use. New functionality available for Sonatype's Nexus Repository monitors and helps address these issues.
Read More...
How to protect yourself against Trojan Source unicode attacks with Sonatype Repository Firewall
3 minute read time
A new kind of attack, Trojan Source, hides vulnerabilities in plain sight of open source code. Protect your development teams with Nexus Firewall.
Read More...
New Sonatype Lifecycle enhancements deliver faster remediation experience
3 minute read time
Prevent development hazards with new Nexus Lifecycle features to quickly compare versions, avoid vulnerabilities, and evaluate open source licenses.
Read More...
New Sonatype Repository Firewall release with developer-first enhancements
3 minute read time
With increasing attacks targeting developers, Sonatype’s new Nexus Firewall features improve application security and developer productivity.
Read More...
JavaScript scanning now supported in JetBrains IDEs: Intellij IDEA, Webstorm, and more
2 minute read time
The Sonatype Nexus platform now evaluates and analyzes Javascript/Node components directly in IntelliJ IDEA.
Read More...
How does securing the software supply chain fit the DoD CIO zero trust architecture?
8 minute read time
Curious how the DoD Zero Trust Architecture relates to secure development and protecting your software supply chain? We're breaking that down for you.
Read More...