software dependencies
‘Perfect 10’ Apple Supply Chain Bug — Millions of Apps at Risk of CocoaPods RCE
Tim looks grim: 10 year old vulnerabilities in widely used dev tool include a CVSS 10.0 remote code execution bug ...
VFCFinder Highlights Security Patches in Open Source Software
VFCFinder analyzes commit histories to pinpoint the most likely commits associated with vulnerability fixes ...
Why an SBOM is Essential for Software Compliance
A software bill of materials (SBOM) can be a powerful tool for enhancing security through improved vulnerability management. It can also help organizations meet their software licensing compliance requirements—no small consideration given ...