[VDBUH2023] - Olimpiu Pop & Steve Poole - Peaceful Sleeping In the Age Of Shells

Log4Shell and SpringShell are just the vulnerabilities that managed to get everybody’s attention, but vulnerabilities that can be as harmful as them are also being discovered. This presentation will provide more information about the existing threats and where to stay informed about them and hint at a couple of tools that can help you keep your code base on products more secure. In the first part, Steve Poole will present an extract of the data that Sonatype gathers daily regarding threats and explain what are the top vulnerabilities you need to be aware of. In the second part, Olimpiu Pop will present a couple of tools that will allow you to automate the securing of your source code and supply chain.