Dissecting Two Emerging Threats: Ledger Breach & Struts2 Vulnerability

Опубликовано: 30 Октябрь 2024
на канале: Sonatype
124
2

A malicious attack on the crypto hardware Ledger was just executed via the theft of npm credentials. On top of that, it’s been revealed that a vulnerability in Struts2, the same used to compromise Equifax, is currently being exploited. While not as severe as a case such as Log4j, these instances demonstrate that open source is aging like milk not wine.

Dive into these recent events with Field CTO, Ilkka Turunen, and explore why Sonatype’s Repository Firewall, Lifecycle, and other solutions are more important than ever.

--

Learn more about Sonatype: https://www.sonatype.com
Get a Free Software Bill of Materials: https://www.sonatype.com/appscan
Get in touch: https://www.sonatype.com/contactus

Follow us-
Facebook:   / sonatype  
LinkedIn:   / sonatype  
Twitter:   / sonatype  

#Sonatype