Michael Prescott @ Sonatype @devcasing

Product Director, Nexus Repository sonatype.com Toronto, Ontario Joined November 2017

Tweets

149
Followers

71
Following

46
Likes

183

Brian Fox @[email protected] @Brian_Fox

a year ago

I’ve spent much time thinking about why organizations struggle to understand the implications of the rise in malicious oss compared to typical vulnerabilities. It ultimately comes down to psychology. In this article, I explore the psychological barriers that prevent effective…

2 4 7 811 0

Ilkka Turunen @llkkaT

a year ago

🚨 an example of an adversary trying to push their malware as a coding solution. Please be careful with any dependencies

Ax Sharma @Ax_Sharma

a year ago

🚨 an example of an adversary trying to push their malware as a coding solution. Please be careful with any dependencies

17 237 1K 185K 249

Download Image

0 1 2 212 0

Ilkka Turunen @llkkaT

a year ago

The NVD backlog just went over 10,000 unanalysed issues

0 2 4 159 0

Download Image

Michael Prescott @ Sonatype @devcasing

a year ago

0 0 0 31 0

Download Image

Ilkka Turunen @llkkaT

a year ago

A stark reminder from the attack on XZ & libzma: It's more than a vulnerability, it's a calculated assault on the stretched open-source infrastructure of our digital world. Read my full take on the implications, actions you can take and the urgent call for collective vigilance…

1 4 4 274 0

Sonatype @sonatype

a year ago

📢 Today marks a new era! Introducing SBOM Manager - the industry's first integrated system of record for managing SBOMs! A powerful, one-stop shop for easy, cost-effective, and compliant #SBOM management, monitoring, and distribution. bit.ly/4cnJpPU

0 4 8 569 0

Download Image

Maury Cupitt @maurycupitt

2 years ago

How to get started with Repository Health Check (RHC) 2.0, available in Sonatype Nexus Repository Manager 3.3: share.sonatype.social/nfjeu

0 1 3 53 0

Michael Prescott @ Sonatype @devcasing

2 years ago

I don't cry that often, but every now and again I hit ⌘ + Option + m to add a comment to a Google doc in view-only mode. Chrome handles that as a request to minimize all fifty of my browser windows across five desktops and dump them in the Dock bar. T_T

0 0 1 41 0

Brian Fox @[email protected] @Brian_Fox

2 years ago

Well, the CRA passed through committee in a way that will avoid further discussion. There's zero chance they knew there were still significant issues and yet here we are. Read more: devops.com/the-cyber-resi… Current status:

2 9 19 3K 5

Download Image

Michael Prescott @ Sonatype @devcasing

2 years ago

Nothing worse than letting the wrong particles into your SDLC.

Playful Python @playfulpython

2 years ago

Nothing worse than letting the wrong particles into your SDLC.

2 1 3 238 0

Download Image

1 1 0 76 0

InfoSec USA @InfoSecUSA

2 years ago

Sonatype Named a Leader in The Forrester Wave™ for Software Composition Analysis securityboulevard.com/2023/06/sonaty…

0 1 1 30 0

Maury Cupitt @maurycupitt

2 years ago

Thrilled to share that @sonatype has been named in the 2023 Gartner Magic Quadrant for Application Security Testing (AST)! Sonatype is recognized as a key vendor for software supply chain security and software composition analysis. Read more👇 share.sonatype.social/zutyr

0 1 2 95 0

Wolfgang Weigend @wolflook

2 years ago

Open source risk management - new responsibilities heading your way … „Must have a SBOM“ and others - session by @sonatype @jaxcon

0 2 5 429 0

Download Image

Bob Paulin @bobpaulin

2 years ago

Hit close to home recently. Releasing code to a package manager has several advantages over just tagging code git. May seem obvious but when a vendor starts with "just build our tag" these are the reasons they should be producing a binary.