Sonatype

Legislation, which passed last week, criticised for a lack of understanding of the open source model

24 July 2023 • 4 min read

New version to be released 1st November. Organisations should act now to track down OpenSSL 3.0.x in their infrastructure, warns Sonatype

27 October 2022 • 2 min read

Victims are offered the decryption key without payment, but the prank demonstrates how easy such an attack can be

03 August 2022 • 3 min read

Initial versions of 'protestware' module added to npm-ipc wiped data on users' devices

18 March 2022 • 4 min read

Malicious typosquatting packages prey on naive users or developers who make a slight typographical error

04 March 2022 • 2 min read

Patch Log4j urgently admins urged, as memories of 2017 Equifax hack loom large

10 December 2021 • 2 min read

IAM misconfiguration has played an increasing role in cloud breaches over the past few years, finds Sonatype/Fugue research

23 July 2021 • 2 min read

Panellists at Computing's DevOps Summit describe their experience of bimodal IT

20 September 2017 • 3 min read