Category: Development News

Many SCA tools also cross-reference against threat intelligence feeds and vulnerability databases for up-to-date risk profiles. It also raised questions around resourcing and support for underfunded but critical open source components. By sending specially crafted log messages, attackers could trigger remote code execution on systems running vulnerable versions of Log4j. The XZ Utils backdoor underscored…