Research has identified malicious software packages associated with the North Korean hacking group, Lazarus Group. 

According to a report, nearly 75% of commercial codebases assessed for risk contain open source components impacted by high-risk vulnerabilities.

As new security risks emerge daily and the tech landscape shifts, false positives are here to stay. Security teams can use data to manage cyber risk.

With both good and bad actors using AI, enterprises will need the best solution to defend themselves. It's an arms race as to who has the best tool.

Cloud native application protection platforms enable CISOs to ensure that the pace of security matches the pace of development of cloud applications.

EMA's Secure Coding Practices survey of 129 software development professionals found that code scanning tools were less effective than developers.

State of the Software Supply Chain Report from Sonatype found legacy open source downloads leading to cybersecurity vulnerability exploitation.

Cybersecurity leadership needs to understand the security challenges of open source code to tackle software supply chain security threats.

Software developers are under pressure to develop programs quickly, but security professionals must work with them to make sure APIs remain secure.

Now more than ever, it’s important to instill trust in the software supply chain. Code signing can help organizations ensure the security of their software supply chain.