Security for Teams Using Open-Source Code. Designed for DevOps.
San Francisco, CA
Joined September 2012
- Tweets1.3K
- Following259
- Followers820
- Likes401
SourceClear retweeted
Later today @fariusdoo from @Veracode will be presenting our work at #ASE2019 2019.ase-conferences.org/det…
Here is preview of our paper "The Dynamics of Software Composition Analysis" where we develop modular means of combining call graphs derived from both static & dynamic analysis
SourceClear retweeted
Understanding the challenges with Product commoditization in SCA - lambdasec.github.io/When-the…
SourceClear retweeted
Check out our integration with @sourceclear to identify the potential risks in your workflow ⚠️ bit.ly/2rXbds9
SourceClear retweeted
Looking for an awesome Customer Success Engineer to join the @sourceclear team! If interested or know anyone who fits the mold... DM me or apply here: hire.withgoogle.com/public/j…
SourceClear retweeted
New #malware called ‘#Digmine’ spreading fast via #Facebook #Messenger: Report indianexpress.com/article/te…
SourceClear retweeted
Massive Cryptomining Campaign Targeting WordPress Sites
reddit.com/r/netsec/comments…
SourceClear retweeted
Malicious campaign targeting Struts uses leaked NSA exploits itwire.com/security/81275-ma… - And I can tell you there is another RCE in the latest version !
SourceClear retweeted
Benchmarking Dependency Analysis Tools dzone.com/articles/benchmark… via @DZone
SourceClear retweeted
Introducing Quick Scan sourceclear.com/blog/Introdu… via @sourceclear
SourceClear retweeted
Recently came to a conclusion that CVE was designed for waterfall while the world moved to DevOps. It’s always people, process and technology. – at Tamalpais Valley, CA
SourceClear retweeted
Check out our integration with @sourceclear to identify the potential risks in your workflow ⚠️ bit.ly/2rXbds9
SourceClear retweeted
How we found exploitable zero-days in the open-source GlassFish server with the Security Graph Language sourceclear.com/blog/How-we-…
SourceClear retweeted
We are starting to publish a handy little list of vulns we published last week @SourceClear - edition 001 is up sourceclear.com/blog/SourceC…
SourceClear retweeted
Running @sourceClear in a Docker Container sourceclear.com/blog/Running…
SourceClear retweeted
The Equifax Hack: What all companies need to know and do to prevent it from happening to them sourceclear.com/blog/The-Equ…
SourceClear retweeted
Check out our integration with @sourceclear to identify the potential risks in your workflow ⚠️ bit.ly/2rXbds9
SourceClear retweeted
A single person gained the ability to compromise 52% of Node packages by harvesting NPM credentials. github.com/ChALkeR/notes/blo…