Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay
Opening a Git repository in a vulnerable version of Cursor could be enough to give attackers code execution on a...
software supply chain
Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands
JetBrains has patched a critical TeamCity vulnerability that could allow unauthenticated attackers to run operating system commands on exposed, self-hosted...
Third-Party SDKs Raise Privacy Questions for Apps Marketed to U.S. Military
The biggest privacy risk on smartphones may not be the apps themselves, but the third-party code quietly running inside them....
China Warns of Claude Code ‘Backdoor’ Security Risk
China is telling organizations to remove certain versions of Anthropic’s Claude Code. The warning claims the AI coding assistant has...
New GitHub Zero-Day Exposed Developer Tokens to Attackers
A single click on the wrong repository could have put a developer’s GitHub access at risk. Security researcher Ammar Askar...
Gartner SRM 2026 Signals a Cybersecurity Shift From Prevention to Resilience
The old success metrics no longer survive contact with reality. There is a particular kind of clarity that comes from...
Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the...
Why Developer Experience Is the Foundation of DevSecOps Success
The post Why Developer Experience Is the Foundation of DevSecOps Success appeared first on 2024 Sonatype Blog. Application security is...
Why Software Supply Chain Security Requires a New Playbook
The post Why Software Supply Chain Security Requires a New Playbook appeared first on 2024 Sonatype Blog. Software is being...
Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype
Dependency management used to be a private embarrassment: an Ant script, a /lib folder, and classpath roulette. You could ship...
