Code quality software firm SonarSource announced a $412 million funding round at a $4.7 billion valuation, as investors continue to pour money into startups tackling software supply chain security.
A cybersecurity startup is warning of a major, unattended weak link in the software supply chain: the vexing problem of secrets sprawl API keys, usernames and passwords, and security certificates exposing weaknesses in the software supply chain.