Search results for Sonatype
Crypto
Linux Foundation launches \'Acrithes\' for coordinated open-source vulnerability patching
The Linux Foundation has launched the Acrithes initiative to address vulnerabilities in the open-source software ecosystem more efficiently, SecurityWeek reported on June 26. Acrithes focuses on responding to newly found vulnerabilities by preparing patches before public disclosure. Participants include Anthropic, AWS, Cisco, Google, IBM, JPMorgan Chase, Microsoft and GitHub, Nvidia and OpenAI, among others. Initial funding comes from the Linux Foundation\'s Alpha-Omega Directed Fund.
AI & Enterprise
AI models hallucinate 28 percent of software dependency upgrade recommendations, study finds
Leaving software dependency decisions to AI models can be risky, a study found. DevSecOps firm Sonatype analysed 36,870 dependency upgrade recommendations generated across four package repositories and reviewed 258,000 recommendations produced by seven AI models from Anthropic, OpenAI and Google. In an earlier study, nearly 28 percent of upgrades recommended by OpenAI GPT-5 were hallucinations involving non-existent versions or paths. A follow-up study found errors persisted in newer models.
AI & Enterprise
Insung Digital signs distribution deal with Sonatype to boost software supply chain security
Insung Digital, an IT solutions distributor, said on Thursday it signed a South Korea distribution agreement with global software supply chain security company Sonatype. Under the deal, Insung Digital will supply open-source management and security platforms in the domestic market. It said the agreement will expand its business portfolio from network and perimeter security into security at the application development stage. It will supply products including Nexus Repository, Repository Firewall, Lifecycle and SBOM Manager.