In late 2021, a critical vulnerability was discovered within the Apache-Log4j logging tool. This Log4j tool and vulnerability became infamous because it was used by millions of software packages ...

It's a new year and the cybersecurity community now faces the long-term consequences of yet another software supply chain security nightmare. After a year full of application security zero-day fallout ...

Device42 this week delivered hybrid cloud discovery capabilities for its IT inventory and asset managementproduct, enabling IT managers to gain near real-time visibility into how cloud assets are ...

Endor Labs today released The 2024 Dependency Management Report, which consolidates extensive original and third-party research into the current state of security in the software dependency lifecycle ...

The supply chain plays a curious role in modern the enterprise. We know it’s important, and understand how, in a global economy with components coming from all kinds of places, it’s incredibly ...

Expertise from Forbes Councils members, operated under license. Opinions expressed are those of the author. With 99% of all commercial code bases containing open-source software, open source rules the ...

If you’ve ever used a modern Linux distribution, you’ve likely experienced the convenience of installing and updating software with a single command. Package managers, the tools behind this ease of ...