open source application scan

OAuth, XSS, Google WhiteSource Log4j Deepfence threat report

WhiteSource Open Source Tool Can Discover Log4j Vulnerabilities

| | Apache Log4j Vulnerability, open source application scan, static code analysis, WhiteSource
WhiteSource has made available an open source tool to detect vulnerable instances of Log4j logging software. The recently disclosed flaw allows cybercriminals to launch a remote code execution (RCE) attack via Java ...
Security Boulevard

What Developers Need to Know About WhatsApp’s Recent Security Dilemma

| | application health, AppSec, embedded malicious code, Industry commentary, malware prevention, open source application scan
Last week, reports, like this one from Dark Reading, surfaced a remotely exploitable bug found in Facebook’s popular WhatsApp chat app, that spies on users and specifically targeted human rights groups. Facebook ...
Sonatype Blog