Tag: CVEs
Report Shines Spotlight on 91 Vulnerabilities Fixed in Latest Update to Spring Framework
Mike Vizard | | AI cybersecurity, AI vulnerabilities, application security, Broadcom, CVEs, devsecops, Java security, open source security, open source vulnerabilities, patch management, security automation, software components, Software Supply Chain, sonatype, Spring framework, Spring vulnerabilities, technical debt, virtual patching, vulnerability managementSonatype says 91 Spring vulnerabilities affecting more than 209,000 software components highlight how AI is accelerating vulnerability discovery and creating a new patching challenge for DevSecOps teams ...
OpenSSF Siren: Security for One, Security for All
Steven J. Vaughan-Nichols | | CVEs, intelligence sharing, iocs, NIST, open source, OpenSSF, risk mitigation, siren, TTPsThe OpenSSF Siren is a fresh, new take on ye old security mailing list ...
No Country for No-Code: Are We Heading Towards a Wild West of Software Security?
Michael Burch | | application security, citizen developers, CVEs, Low Code, No Code, software securityThe specter of an untrained employee creating applications is alarming: No-code/low-code platforms empower employees with no application security knowledge to develop programs that security teams don’t know exist ...
