Nexus Intelligence News Today

Software Development News

- Addition of proven leader Alex Berry, largest Q4 ever, and 200+ new hires bolster momentum for 2022- Company growth showcases importance of intelligent,...

Heading into the new year, I had the opportunity to reflect on the journey Sonatype has been on for over a decade, and how the industry has changed since we first invented componentized software development and then software supply chain management. 

FULTON, Md., Dec. 22, 2021 (GLOBE NEWSWIRE) -- The Log4j open source component has been downloaded nearly five million times since a critical vulnerab

Share: FULTON, Md., March 16, 2021 (GLOBE NEWSWIRE) -- Sonatype, the leader in developer-friendly tools for software supply chain management and security, today unveiled the next-generation Nexus platform offering customers full-spectrum control of the cloud-native software development lifecycle including: third-party open source code, first-party source code, infrastructure as code (IaC), and containerized code.  "As software development teams race forward to deliver new digital innovations...

Russian Enterprises Turn to Swordfish Security and Sonatype to Combat Risk Associate with Open Source Companies look to the duo to build mature DevSecOps processes into their software development lifecycle and help protect their applications MOSCOW, Feb. 25, 2021, a leader in Russian application security and enterprise digital transformation projects, today announced it secured its dedicated Platinum Partner Certification with Sonatype, the leader in open source governance and DevSecOps automa...

Bahwan CyberTek partners with Sonatype Bahwan CyberTek partners with Sonatype Mumbai, Feb 19: Bahwan CyberTek (BCT), a global leader in digital transformation, announced a strategic partnership with Sonatype, a leading player in open source governance and DevSecOps automation, to help customers mitigate risks at every stage of their software development lifecycle (SDLC). BCT will leverage Sonatype’s Nexus platform, to help its customers build open source risk policies and effectively mitigat...

Just who is running your favourite project these days? Joseph Martins Wed 17 Feb 2021 // 20:00 UTC Share Copy Sponsored In November 2020, the JavaScript registry npm flashed a security advisory that a library called twilio-npm harboured malicious code which could backdoor any machine it was downloaded to. Perhaps the most troubling aspect of this tale is that this was the seventh such malicious package found on npm within a month, a stark illustration of the effort that ...

After a security researcher was able to breach Tesla, Apple and others, more than 150 copycats emerged, most claiming to be researchers. ("tesla" by smellsofbikes is licensed under CC BY-NC-SA 2.0) Pseudonymous authors published more than 150 copycat packages just three days after Sonatype published research around a software supply chain flaw, attempting to exploit the vulnerabilities in the brief window before a patch. Ethical hacker and security researcher Alex Birsan posted a blog on Feb. 9...

Cigniti Technologies Announces Partnership with Sonatype, Extends AppSec Offering with Best-in-Class Software Composition Analysis With the Sonatype Nexus Platform, Cigniti now helps customers shift left and automate open source security at every stage of the software development lifecycle LONDON, Jan. 06, 2021 (GLOBE NEWSWIRE) -- Cigniti Technologies, a global leader in independent quality engineering and software testing services, today announced a partnership with Sonatype, the company t...