Software Composition Analysis | Page 7

The Payment Card Industry (PCI) Introduces New Software Standards to Guard Against Theft

Over the last several years, billions of people have been victims of data breaches. According to the digital security firm Positive Technologies in a recent USA Today article, in the months of April, …

February 27, 2019 Kendra Morton

Compromised npm “event-stream” and “flatmap-stream” packages lead to supply chain attack

For the past week security researchers have been pouring over strange encrypted source code that was inserted into a popular npm module named “event-stream”. This source code has been decrypted and de…

November 27, 2018 Revenera

You’re Invited to Learn More About Open Source Software Due Diligence for M&A Efforts

“Preparing for an M&A? Avoid Common Pitfalls Around Open Source Software and Follow Leading Practices” Date: December 5, 2018 Time: 3:30 to 6:00 PM PT Location: KPMG SF, 55 2nd Street, Suite 1400,…

November 16, 2018 Kendra Morton

What’s going on with libssh and what should we expect in the near future?

Recently, it was discovered that the well-known libssh library had a serious security vulnerability. This vulnerability, known as CVE-2018-10933, allowed clients to get unauthorized access to libssh-b…

October 29, 2018 Revenera

2019: The Rise of Experts and Managed Services Providers (MSP) for Open Source Management

In the rush to make establishing an inventory of your open source use easy, many Software Composition Analysis (SCA) vendors overlook one very important thing—YOUR ROUTE TO BUSINESS VALUE. Sure, the …

October 8, 2018 Revenera

Back to The Future: Why Your Commercial Present Is Vulnerable to The Open Source Past.

The 2018 health data breaches reported by the U.S. Department of Health and Human Services Office for Civil Rights caught my eye. As of 21st August of 2018, 229 breaches have affected 6.1 million in…

September 11, 2018 Revenera

Manage Your OSS Security Using a Free Scanning Tool

Why spin your wheels? Why hesitate? What’s there to think about? Why? Why? Why? Frankly, okay, there’s a lot to think about when it comes to managing your Open Source Software and potential OSS vulner…

August 29, 2018 Kendra Morton

Flexera Software and KPMG Expand Alliance to Keep Open Source Software Clean and Safe

KPMG Adopts FlexNet Code Insight to Identify Open Source License Compliance and Security Risks Flexera and KPMG LLP, the U.S. audit, tax and advisory firm, today announced an expanded strategic al…

August 27, 2018 Nicole Segerer

Heads Up! There’s a New Struts 2 Vulnerability in Town.

Secure your Open Source Software now. About a month before the Equifax breach hit the news, Flexera took the virtual stage at one of FS-ISACs global threat update calls to alert about the dangers of O…

August 23, 2018 Revenera

Is Your OSS Strategy Crying for Help?

Perhaps it is, but you’re completely unaware. You’ve probably heard the catchy line from Capital One Financial, “What’s in your wallet?” Have you asked yourself lately, “What’s in your code?” More tha…

August 22, 2018 Kendra Morton

Tag: Software Composition Analysis

The Payment Card Industry (PCI) Introduces New Software Standards to Guard Against Theft

Compromised npm “event-stream” and “flatmap-stream” packages lead to supply chain attack

You’re Invited to Learn More About Open Source Software Due Diligence for M&A Efforts

What’s going on with libssh and what should we expect in the near future?

2019: The Rise of Experts and Managed Services Providers (MSP) for Open Source Management

Back to The Future: Why Your Commercial Present Is Vulnerable to The Open Source Past.

Manage Your OSS Security Using a Free Scanning Tool

Flexera Software and KPMG Expand Alliance to Keep Open Source Software Clean and Safe

Heads Up! There’s a New Struts 2 Vulnerability in Town.

Is Your OSS Strategy Crying for Help?

Topics

Tweets by Revenera

Archive

Install

Protect

Monetize

Resources

About Us