Your Artifact Repositories Need a Firewall

Most organizations spend a lot of time looking for vulnerabilities in the software they build. But what about the malicious packages that enter before development even begins?

بدافزار و آلودگی آسیب‌پذیری و روز صفر متن‌باز
خواندن متن کامل در Sonatype Blog درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Orca Security

Shadow AI Generated Apps: Find Them in the Cloud and Code You Already Scan

The Orca Research Pod recently found that 51% of organizations have adopted AI to build software, yet 81% have critical vulnerabilities in AI packages (Hacker Valley News, 2026). In 2025, CVE-2025-48757 showed how a single missing database policy in AI-generated Supabase projects exposed data across more than 170 production apps. None of these apps went […]