Software Composition Analysis
Apache Unomi CVE-2020-13942: RCE Vulnerabilities Discovered
“Apache Unomi is a Java Open Source customer data platform, a Java server designed to manage customers, leads and visitors’ data and help personalize customers experiences,” according to its website. Unomi can ...
What the Building In Security Maturity Model (BSIMM) Says About the Role of SAST and SCA
The BSIMM is an annual study of the real-world software security initiatives – “SSIs” in the report - across the software industry drawing from data and experience from 130 organizations. Rather than ...
Considering Nexus Auditor? You Should, But Know These Things First
I field a flood of requests every week asking to learn more about Nexus Auditor. I get it. Nexus Auditor, in the right use case, is a solid, cost-effective solution. Is Nexus ...
It’s Time to Update Your Drupal Now!
As part of our ongoing mission to help organizations develop and deploy more secure software and applications, and in light of Checkmarx’s expanded insight into the open source security landscape with its ...
Bringing Your Retail Application Security Strategy Up to Par
It’s no secret that retail has been in the midst of a massive digital transformation over the past few years, largely driven by emerging software and technology, as shoppers seek out new ...
The Road to DevSecOps: Addressing the Challenges of Open Source Software
Although software is significantly changing our work, home, and personal lives, many don’t realize that today’s software is made up of numerous ingredients. Some of the software we use daily contains pieces ...
Octopus Scanner Compromises 26 OSS Projects on GitHub
Updated from original May 29th post. Making a salad for lunch or dinner? What ingredients do you use? Lettuce, carrots, onions, tomatoes, dressing? If you just go by the list of ingredients, ...
Octopus Malware Compromises 26 OSS Projects on GitHub
Updated from original May 29th post. Making a salad for lunch or dinner? What ingredients do you use? Lettuce, carrots, onions, tomatoes, dressing? If you just go by the list of ingredients, ...
Real Talk: What Users Really Look For in a Software Composition Analysis (SCA) Solution
A few weeks ago, we wrote about the differences in SCA and SAST tools. While you can’t really compare the two, for most organizations, software composition analysis (SCA) is likely the best ...
Your Guide to AppSec Tools: SAST or SCA?
The application security market is saturated with tools like DAST, SAST, IAST, and RASP - which can be overwhelming. Each of these tools play a specific security role within the SDLC, but ...
