SolarWinds and Log4j have made software supply chain security issues a topic of intense interest and scrutiny for businesses and governments alike. SolarWinds was a terrifying example of what can go ...

Roughly 38% of applications using the Apache Log4j library are using a version vulnerable to security issues, including Log4Shell, a critical vulnerability identified as CVE-2021-44228 that carries ...

The Java security specialists at Dublin-based Waratek have released a new Log4J Vulnerability Scanner and added API security to their Java Security Platform, the company announced recently. The ...

One year after the Log4j disaster, open source community efforts and new developer toolchains are addressing the challenges of software supply chain security. Early December marked the one-year ...

China-linked hackers exploited multiple CVEs in April 2025 to target global entities with advanced persistence.

Vulnerabilities in AI-assisted technology can snowball into national security risks; building safeguards and governance ...