Tag: Log4J vulnerability

GitBOM Tool Automatically Identifies Software Artifact Components

Mike Vizard | September 16, 2022 | GIT, Log4J vulnerability, microsoft, SBOMs, Software Supply Chain

An open source GitBOM tool, discussed at the Open Source Summit Europe conference this week, can automatically track every source code file incorporated into each built artifact. Nell Shamrell-Harrington, a principal software ...

White House Meeting Puts Spotlight on OSS Sustainability

Mike Vizard | January 18, 2022 | burnout, Log4J vulnerability, open source, open source talent, sustainability, white house summit

A recent meeting between IT industry leaders and White House officials highlighted open source software sustainability concerns as high-profile breaches and zero-day attacks have many organizations reviewing their software supply chains. The ...

JFrog Pulumi Log4j infrastructure security

Log4j: Is There Such a Thing as ‘Too Much’ Open Source?

Mitch Ashley | December 15, 2021 | Apache Log4j, Log4J vulnerability, open source projects, open source security

The Log4j vulnerability got me thinking: Is there such a thing as too much open source? Before anyone immediately fires off a flaming email, rage tweet or scathing blog post, hear me ...

Log4j Puts Effective IT Operations at Center Stage

Kristin Hazlewood | December 15, 2021 | apache, IT operations, java, Log4J vulnerability, secure

News of the Apache Log4j vulnerability exploit is striking fear into the hearts of both software makers and users. Log4j is the most popular Java logging service used today, with over 400,000 ...