New GitHub Zero-Day Exposed Developer Tokens to Attackers
A single click on the wrong repository could have put a developer’s GitHub access at risk. Security researcher Ammar Askar...
software supply chain
Gartner SRM 2026 Signals a Cybersecurity Shift From Prevention to Resilience
The old success metrics no longer survive contact with reality. There is a particular kind of clarity that comes from...
Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft
Grafana has confirmed that an unauthorized party gained access to its GitHub environment after obtaining a compromised token, allowing the...
Why Developer Experience Is the Foundation of DevSecOps Success
The post Why Developer Experience Is the Foundation of DevSecOps Success appeared first on 2024 Sonatype Blog. Application security is...
Why Software Supply Chain Security Requires a New Playbook
The post Why Software Supply Chain Security Requires a New Playbook appeared first on 2024 Sonatype Blog. Software is being...
Trust At Scale: The Commons, Threats, and AI in the Loop | Sonatype
Dependency management used to be a private embarrassment: an Ant script, a /lib folder, and classpath roulette. You could ship...