Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Synopsys

Preparing for critical libcurl and curl vulnerabilities (CVE-2023-38545)

The maintainer and original author of curl, Daniel Stenberg, has taken to X (formerly Twitter) and LinkedIn to sound the alarm on what he refers to as “probably the worst security problem found in curl in a long time.” According to project maintainers, the fixed version, 8.4.0, is set to be released on Wednesday, October 11.

Find open source vulnerabilities in containers with Black Duck Binary Analysis | Synopsys

Discover how to identify open source components and vulnerabilities in various software binaries including container images, mobile apps, and embedded software with Black Duck Binary Analysis What’s covered?

Track and manage open source risks across your application portfolio with Black Duck SCA | Synopsys

Learn how your security teams can take a proactive approach to managing open-source risk using Black Duck. Join us as we explore the process of analyzing scan results, addressing new CVEs, and prioritizing remediation efforts.

Find secure, compliant, and high-quality OSS components with Black Duck SCA | Synopsys

In this video, we take you on a tour through Black Duck’s SCA tool to show you how you can find and select the most high-quality open-source components for your applications. Key Highlights: Ready to save time and innovate with confidence? Visit synopsys.com/blackduck to learn more about obtaining visibility into component health and viability.

Build an SBOM in under 30 seconds with Black Duck SCA | Synopsys

In this video, we show you how easy it is to create an open source Software Bill of Materials (SBOMs) using Black Duck. Join us as we demonstrate how to effortlessly generate an SBOM in under 30 seconds, empowering enterprise teams to prioritize SBOM creation.

XML external entity injection vulnerability in OpenNMS

OpenNMS is a Java language open source network monitoring platform. The OpenNMS platform monitors some of the largest networks in the Fortune 500, covering the healthcare, technology, energy, finance, government, education, retail, and industrial sectors, many with tens of thousands of networked devices.

Accelerate modern development with Polaris pull request comments support | Synopsys

Integrate seamlessly into your SCM and DevOps pipelines. Learn how teams can effortlessly provide automatic feedback on new issues, without slowing down workflows. With Polaris in your pipelines, access both SAST and SCA findings directly within GitHub as comments on pull requests. Streamline triage, audit, policy, and reporting—all conveniently stored in Polaris.