Featured Article
Top 10 open source projects hit by HTTP/2 'Rapid Reset' zero-day
The shifting landscape of open source supply chain attacks - Part 3
12 minute read time
Brian Fox shares insights on who’s responsible for the security of software supply chains, and how orgs can minimize impact on efficiency and speed.
Read More...
Going online with the OWASP Vulnerability Management Guide Working Group
6 minute read time
The OWASP Vulnerability Management Guide (OVMG) project seeks to simplify vulnerability management into repeatable and scalable cycles.
Read More...
Malware Monthly - December 2022
10 minute read time
Sonatype's Malware Monthly brings you the latest information on malicious and suspicious packages discovered in software registries.
Read More...
The no-fix mediums? Not having a high priority doesn’t mean low danger
5 minute read time
An ongoing weak link in the software supply chain is vulnerable software – are you being proactive or just putting out fires?
Read More...
This Week in Malware - Over 70 packages discovered
2 minute read time
This week, we discovered and analyzed six dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Nearly 40 packages discovered
2 minute read time
This week in malware, we discovered and analyzed nearly 40 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Over 50 packages discovered
2 minute read time
This week we discovered and analyzed nearly 5 dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - Over 100 packages discovered
6 minute read time
This week in malware, we discovered and analyzed more than 100 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...
This Week in Malware - 135 packages target npm and PyPI registries
3 minute read time
This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries.
Read More...