vulnerabilities | Revenera Blog

SBOMs: It’s All About Transparency into the Complexity of Your Software

Over the past few years, the software industry has increasingly relied on open-source software. It’s rare to find an application that solely uses proprietary components, with most enlisting a mix of t…

September 13, 2022 Kendra Morton

Everything Your Business Needs to Know About SBOMs

On the 12th of May 2021, The White House released an Executive Order (EO) that outlined the guidelines for improving the cybersecurity of the United States. After many high-profile cybersecurity breac…

July 29, 2022 Kendra Morton

How the U.S. Executive Order Is Shaping the Software Supply Chain Going Forward

Early in December of 2021, the international cybersecurity community mobilized in response to the discovery of the Log4J vulnerability. This critical vulnerability was within the logging librar…

July 11, 2022 Kendra Morton

Spring4Shell: Deep breath. Don’t panic. Mitigate.

Development and security teams, software creators, and companies alike were hit once again with another vulnerability when news made its way online of a disclosure of a PoC for an unauthenticated zero…

April 4, 2022 Kendra Morton

The story behind colors.js and faker.js

The bizarre case of the author who corrupted his own npm packages – colors.js and faker.js. Originally reported by Bleeping Computer on Jan 9th the author of npm packages colors.js and faker.js…

February 9, 2022 Marcus Lucero

The FTC’s warning to companies about the failure to protect against open source vulnerabilities

In direct response to the Log4j vulnerability, the United States Federal Trade Commission published an alert. Net? If your company does not take proactive steps to prepare for future vulnerabilities l…

February 4, 2022 Kendra Morton

When is the right time to conduct an open source audit?

No matter what industry you are in, your company’s code most definitely contains code from someone else. Today’s software is not written from scratch, but rather assembled from parts. Th…

November 22, 2021 Michael Lelchuk

The New Cybersecurity Executive Order: 2021 is the Year of the SBoM

Back in February my colleague Alex Rybak posted a blog titled 2021 Will Be the Year of the Automated Software Bill of Materials. Well, yesterday, in an executive order signed by President Biden, that …

May 13, 2021 Kendra Morton

Top 10 Trends for Open Source Governance in 2021

In its 2020 State of the Octo-verse report, Microsoft revealed that there were 60 million new repositories created on GitHub, more than 56 million developers on the open source development platform an…

February 9, 2021 Kendra Morton

Open source is essential. Are you addressing the hidden compliance and security costs?

Just as lockdowns started to sweep the globe in March, Bill Gates tweeted about an open source software platform called Nextstrain. The open source application helps track the spread of viruses – nota…

December 16, 2020 Kendra Morton

Tag: vulnerabilities

SBOMs: It’s All About Transparency into the Complexity of Your Software

Everything Your Business Needs to Know About SBOMs

How the U.S. Executive Order Is Shaping the Software Supply Chain Going Forward

Spring4Shell: Deep breath. Don’t panic. Mitigate.

The story behind colors.js and faker.js

The FTC’s warning to companies about the failure to protect against open source vulnerabilities

When is the right time to conduct an open source audit?

The New Cybersecurity Executive Order: 2021 is the Year of the SBoM

Top 10 Trends for Open Source Governance in 2021

Open source is essential. Are you addressing the hidden compliance and security costs?

Topics

Tweets by Revenera

Archive

Install

Protect

Monetize

Resources

About Us