Platform
Solutions
- - Integrated Innovation Align dev, security, and ops teams to fuel secure deployment
- By Industry
Pricing
Resources
- - Resource Center Articles, videos, and reports that help transform the way you innovate.
Partners
- - Partner Program Explore the Sonatype Partner Acceleration Program
    - Become a Partner Join our extensive Sonatype Partner Network
    - Find a Partner Find and connect with a certified Sonatype Partner
Company

Sonatype Blog

Discover valuable insights on DevOps, Application Security, Software Innovation, Vulnerabilities, Software Supply Chain Management, SBOMs and Sonatype products.

Blog Post

What's happening with MITRE and the CVE program uncertainty

Blog Post

Open Source Malware Index Q1 2025: Data exfil threats rising sharply

Blog Post

Using Sonatype Nexus Repository with Docker Hub rate limits

Blog Post

Multiple crypto packages hijacked, turned into info-stealers

All blog posts

Filter by

PyPI crypto-stealer targets Windows users, revives malware campaign

Blog Post

Zero-day vulnerabilities: A beginner’s guide

Blog Post

The new Sonatype Learn: Self-service educational materials where and when you need them

Blog Post

Enhance security with Sonatype Lifecycle and ServiceNow Application Vulnerability Response (AVR) integration

Blog Post

Take control of your InnerSource components with InnerSource Insight

Blog Post

A guide for open source software (OSS) security

Blog Post

Sonatype Lifecycle best practices: Reference policies, backup and restore

Blog Post

The impact of automating open source dependency management

Blog Post

Sonatype Lifecycle best practices: Getting started and managing SBOMs

Blog Post

DevOps pioneers navigate organizational transformation

Blog Post

Devs flood npm with 15,000 packages to reward themselves with Tea 'tokens'

Blog Post

The essential duo of SCA and SBOM management

Blog Post

Automating and maintaining SBOMs

Blog Post

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

Blog Post

SBOM, VDR, and Maven: Transforming the Apache Logging experience to a common pattern

1
...
8
9
10
...
14

Platform
- Overview
- Repository
- Pricing
- Firewall
- SBOM Manager
- Lifecycle
- Integrations
- AI/ML

Solutions

Community

Partners

Company
- Careers
- Contact
- About
- Newsroom
- Trust Center
- Investors
- Press Kit

Subscribe for all the latest software security news and events

Terms of Service
Privacy Policy
Modern Slavery Statement
Event Terms and Conditions
Do Not Sell My Personal Information
Cookie Preferences

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.

Subscribe Today

First Name

Email

Company

Form Tier

Lead Source Most Recent