vulnerabilities | Revenera Blog

Spring4Shell: Deep breath. Don’t panic. Mitigate.

Development and security teams, software creators, and companies alike were hit once again with another vulnerability when news made its way online of a disclosure of a PoC for an unauthenticated zero…

April 4, 2022 Kendra Morton

The story behind colors.js and faker.js

The bizarre case of the author who corrupted his own npm packages – colors.js and faker.js. Originally reported by Bleeping Computer on Jan 9th the author of npm packages colors.js and faker.js…

February 9, 2022 Marcus Lucero

The FTC’s warning to companies about the failure to protect against open source vulnerabilities

In direct response to the Log4j vulnerability, the United States Federal Trade Commission published an alert. Net? If your company does not take proactive steps to prepare for future vulnerabilities l…

February 4, 2022 Kendra Morton

When is the right time to conduct an open source audit?

No matter what industry you are in, your company’s code most definitely contains code from someone else. Today’s software is not written from scratch, but rather assembled from parts. Th…

November 22, 2021 Michael Lelchuk

The New Cybersecurity Executive Order: 2021 is the Year of the SBoM

Back in February my colleague Alex Rybak posted a blog titled 2021 Will Be the Year of the Automated Software Bill of Materials. Well, yesterday, in an executive order signed by President Biden, that …

May 13, 2021 Kendra Morton

Top 10 Trends for Open Source Governance in 2021

In its 2020 State of the Octo-verse report, Microsoft revealed that there were 60 million new repositories created on GitHub, more than 56 million developers on the open source development platform an…

February 9, 2021 Kendra Morton

Open source is essential. Are you addressing the hidden compliance and security costs?

Just as lockdowns started to sweep the globe in March, Bill Gates tweeted about an open source software platform called Nextstrain. The open source application helps track the spread of viruses – nota…

December 16, 2020 Kendra Morton

The GeForce NOW Vulnerability: What Gamers Need to Know

Nvidia revealed a high-severity vulnerability (CVE‑2020‑5992) in its GeForce NOW application software for Windows—used for its cloud-based gaming service which provides real-time gameplay on desktops,…

November 24, 2020 Kendra Morton

Remote Code Execution Vulnerability: Oracle WebLogic Server Under Attack

A critical and easily exploitable remote code execution vulnerability (CVE-2020-14882) in Oracle WebLogic Server is being targeted by attackers. The issue has a CVSS base score of 9.8 out of 10 and is…

November 3, 2020 Kendra Morton

Tag: vulnerabilities

Spring4Shell: Deep breath. Don’t panic. Mitigate.

The story behind colors.js and faker.js

The FTC’s warning to companies about the failure to protect against open source vulnerabilities

When is the right time to conduct an open source audit?

The New Cybersecurity Executive Order: 2021 is the Year of the SBoM

Top 10 Trends for Open Source Governance in 2021

Open source is essential. Are you addressing the hidden compliance and security costs?

The GeForce NOW Vulnerability: What Gamers Need to Know

Remote Code Execution Vulnerability: Oracle WebLogic Server Under Attack

Topics

Tweets by Revenera

Archive

Install

Protect

Monetize

Resources

About Us