Understanding the Exploitability of Spring4Shell

Revenera Software Pulse

#Tech #Business #News #Tech News #pRevenera Experts #Software #Cybersecurity #Security #Monetize #B2B #SaaS #Open Source Software #Oss #Software Development Software Code

39:30

In this episode of The Innovators & Investors Podcast, host Kristian Marquez sits down with David Brem, Managing Director of the University of Michigan’s Zell Lurie Commercialization Fund. David offers a rare glimpse into the inner workings of a student-led endowment fund focused on early-stage, sector-agnostic investments primarily in the Michigan ecosystem. He shares insights on their unique, founder-first investment approach, how they navigate pre-seed to Series A venture opportunities, and the rigorous due diligence process involving qualitative analysis over pure numbers. David also discusses his roles with global VC networks including Electro Ventures, the London Venture Capital Network, and Level Up Ventures, illustrating how he bridges U.S., European, and Australian venture ecosystems with a special focus on mobility and transportation tech. Highlights include deep dives into emerging trends like eVTOLs (electric vertical takeoff and landing aircraft), smart city infrastructure, and safety innovations in aviation technology. Listeners will gain valuable perspectives on how diverse expertise—from military intelligence and management consulting to academic ventures—shapes David’s investment thesis and community-building efforts. The episode also explores the importance of networking, adding value in the startup ecosystem, and practical advice for aspiring investors or entrepreneurs navigating the venture capital world. With stories of successes, challenges, and future outlooks, this episode is a must-listen for innovators, founders, and investors aiming to understand the intersection of academia, technology, and venture capital in today’s dynamic landscape. Learn more about David's work at https://zli.umich.edu/zell-lurie-commercialization-fund/ Connect with David on LinkedIn at https://www.linkedin.com/in/david-lowell-brem/ Think you'd be a great guest on the show? Apply at https://finstratmgmt.com/innovators-investors-podcast/ Want to learn more about Kristian Marquez's work? Check out his website at https://finstratmgmt.com…

3 years ago 15:23

MP3•Episode home

The Spring4Shell vulnerability can be exploited when an attacker sends a specially crafted query to a web server running the Spring Core framework. Listen to this podcast to learn what it is and steps to take.
For more information, visit www.Revenera.com

39 episodes

Understanding the Exploitability of Spring4Shell

Revenera Software Pulse

published 3 years ago

MP3•Episode home

39 episodes

#Tech #Business #News #Tech News #pRevenera Experts #Software #Cybersecurity #Security #Monetize #B2B #SaaS #Open Source Software #Oss #Software Development Software Code

All episodes

1
Setting up your OSS Management process 58:38

28 weeks ago58:38

58:38

The software supply chain is at the forefront of security discussions in companies and governments across the world. Join our expert team as they walk you through how to setup a comprehensive OSS Management program to address both software supply chain security and legal compliance. In this podcast we provide an industry update and an overview of best practices to get started or mature your existing OSS Management program. We will discuss several examples of how organizations accomplish the following: Inbound assessments for incorporating external content into your organization’s codebase Internal compliance checks as part of a broader shift-left strategy Complying with industry regulations via SBOMs, security reports, and software attestations Reacting to compliance events via an impact assessment and remediation If you are new to OSS/SCA/SBOM management or are looking to take your organization’s process to the next level of maturity, this is the podcast for you. For more information visit www.revenera.com…

1
Mitigating Risks in Open Source and Software Supply Chains: A Global Outlook 1:02:50

28 weeks ago1:02:50

1:02:50

Companies face increasing challenges in managing risks associated with the widespread use of open source and third-party software, compounded by the growing complexity of the software supply chain. With the rise of new technologies like Generative AI and Machine Learning, the landscape is becoming even more intricate, necessitating a shift in how professionals approach compliance and risk management. In this podcast, Leon Schwartz (GTC Law Group) and Andreas Kotulla (Bitsea GmbH) will discuss the latest regulation changes in the US and EU. We’ll take some real-life examples to explore what’s really changing in the world of Open Source and what you need to know to help your clients and organizations navigate their legal rights and responsibilities. Whether you're involved in software development, cybersecurity, or legal compliance, this webinar will provide you with the insights and strategies needed to effectively address these complexities and foster a compliance-first culture at your organization.…

1
Introducing Pay-Per-Use Models to Your Sales Strategy 29:18

29 weeks ago29:18

29:18

As technology companies face a perfect storm of rising cloud costs, falling investment levels, and customers complaining of ‘subscription fatigue’, many are adopting usage-based pricing options to sustain growth. Join Revenera’s Senior Director of Product Management, Paul Bland, as he outlines how to allow greater flexibility and unlock new revenue streams with Elastic Access – an innovative approach to monetizing digital experiences. Key takeaways include: How to layer consumption onto your existing sales strategies How to keep customers happy with self-service and cross-portfolio access How to accelerate time-to-market for new price and packaging configurations How to guide upsell, cross-sell and renewal conversations with detailed usage data When procurement teams are putting increased pressure on buyers to prove ROI, it’s crucial to have value-based conversations that prove your worth, and the insights from pay-per-use components can help you demonstrate tangible benefits. Don’t miss this opportunity to stay ahead of the curve. Register now to learn how Elastic Access can help you expand into new markets and drive your business forward here - https://info.revenera.com/SWM-WBNR-Pay-Per-Use-Monetization-Models For more information visit www.revenera.com…

1
OSS management use cases for software supply chain security 56:22

37 weeks ago56:22

56:22

The software supply chain is at the forefront of security discussions in companies and governments across the world. Join our expert team as they walk you through four key open source software (OSS) management use cases that enable you to confidently identify security vulnerabilities in open-source and third-party components within your code, as well as manage OSS license compliance and build a Software Bill of Materials (SBOM). If you are new to SBOMs or are looking to take your process to the next level of maturity, this is the podcast for you! In this session we provide an industry update and an overview of four practical OSS management use cases with best practices for how to accomplish the following: A local developer compliance check in the IDE before code check-in Security flow for assessing and annotating security vulnerabilities associated with your SBOM parts and generating a VEX with your analysis data Construction of an SBOM in SPDX, CycloneDX, and human readable formats Preparation of third-party notices to comply with OSS license attribution requirements You can register to view the webinar with slides here - https://info.revenera.com/SCA-WBNR-OSS-Management-UseCases…

1
How to Secure and Monetize Medical Devices 37:17

37 weeks ago37:17

37:17

In the fast-moving world of medical devices, software has become the beating heart of innovation as producers transition from hardware-focused to subscription-based business models. Join software security and monetization experts, Alex Rybak and Vic DeMarines for an exclusive podcast offering practical advice on: Ensuring software security and compliance with FDA and European regulations Harnessing the power of licensing for enhanced compliance traceability Streamlining operations through seamless remote software updates Measuring success with the right KPIs for your software-driven future The switch from selling hardware to software monetization may seem daunting, especially in such a tightly regulated industry, but the benefits are transformative. Don't miss this opportunity to future-proof your solutions, elevate patient experiences, and stay compliant. You can view the webinar along with the slides here - https://info.revenera.com/SWM-WBNR-Medical-Devices-Monetization…

1
The Future of Software Monetization 33:57

37 weeks ago33:57

33:57

As a leading authority on software market trends, Mark Thomason, Research Director for Digital Business Models and Monetization, has valuable findings to share from IDC’s Worldwide CEO Survey 2024. With input from 354 CEOs, the comprehensive data highlights key priorities for senior leaders at global technology companies and offers insights on how to prepare for change in a fast-moving world. Major takeaways include: The impact of AI, both in terms of risk and customer expectations The trend toward prepaid consumption credit models with drawdown The importance of usage data in demonstrating value-based outcomes Current and future needs for subscription billing Segmented market growth predictions from 2023-2027 You can view the webinar along with the referenced slides here - https://info.revenera.com/SWM-WBNR-IDC-Software-Trends…

1
Best Practices for On-Premises to SaaS Transition Projects 26:32

37 weeks ago26:32

26:32

Having worked on the frontline of software monetization for Baker Hughes and now in her role leading Revenera’s Professional Services team, Sheela Bilderback has a wealth of hands-on experience helping organizations move products from on-premises to SaaS deployments. Taken from Revenera's SoftSummit 2024 event, hear this enlightening podcast as Sheela shares practical advice on: How to optimize your quote-to-cash and entitlement management processes How to build your transition team and keep stakeholders happy How to take your customers with you… and keep them! You can view the session along with the slides here - https://info.revenera.com/SWM-WBNR-On-Premises-SaaS-Transitions…

1
Intro & Refresher - Managing Open Source Software 59:25

1 year ago59:25

59:25

Are you starting out on or getting serious about your open source management journey? Then accelerate your progress by learning the key points on the topic in this one hour podcast. If you are new to SBOMs or are looking to take your process to the next level of maturity, this is the session for you! Learn about or get a refresher on OSS, SCA, OSPOs, and SBOMs along with the latest industry updates. In this short session by our open source expert, Alex Rybak, you'll get: An Open Source Software (OSS) refresher A Software Composition Analysis (SCA) refresher and best practices An Open Source Program Office (OSPO) refresher and best practices Software Supply Chain Security industry & regulations updates A short overview of Revenera Audit Services to help you get started, or accelerate your existing program If you are new to OSS/SCA/SBOM management or are looking to take your organization’s process to the next level of maturity, you can view the whole episode with slides at here…

1
2024 Software Security and Compliance Predictions 50:08

1 year ago50:08

50:08

Wow, time flies. It’s that time again—time to discuss the hottest trends for 2024 in software composition analysis and software supply chain security. Every year our experts take a shot at predicting what's ahead. Join Alex Rybak, Sr. Director of Product Management at Revenera, and Russ Eling, founder and CEO of OSS Consultants, as they run down a list of our top trends going into the new year. If you're using or managing open source or third-party components, creating policies, overseeing your organization's IP, responsible for asset management or security, or concerned about the quality of software solutions you're shipping to customers, attend this must-watch webinar and get a jumpstart on what to prepare for in the year ahead. To watch the full recording with slides, click here…

1
Is Revenera’s Cloud License Server Right for You? 8:10

2 years ago8:10

8:10

If you are looking to leverage your DevOps in the cloud, whether you’re going to utilize Microsoft Azure, Amazon Web Services, or Google Cloud Platform, then Revenera’s Cloud License Server (CLS) is the right model for your software installation needs. The CLS option provides you with the support and flexibility to easily build your installers in your DevOps pipeline itself rather than as a separate process. Listen to this podcast to learn more about CLS, what it is, and the potential benefits for you.…

1
A Break Down of the National Cybersecurity Strategy 16:44

2 years ago16:44

16:44

In a continuing effort to bolster and secure the nation’s software supply chain, the Biden administration issued in the 2023 National Cybersecurity Strategy. This plan focus’ on enhancing the country’s defenses against emerging threats, such as ransomware and supply chain attacks. Listen to this podcast to better understand what's outlined in the report and what it may mean to you as a software provider. For more information, visit www.revenera.com…

1
Piracy Impact Episode 14 Vic DeMarines 26:05

3 years ago26:05

26:05

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael close out the year and Season 2 of the Piracy Impact Podcast with a great behind-the-scenes conversation with Revulytics’ VP of Product and Strategy, Vic DeMarines. Vic talks about his background in security software with companies like RSA, Progress Software, and Authentica, and the early days of software protection at Revulytics and what led the company to pivot to take a more proactive piracy detection approach. You won’t want to miss Vic’s impressions on the impact of GDPR, changes in software vendors’ approach to license compliance, and where the industry is headed.…

1
Piracy Impact Episode 13 Jason Swan 24:37

3 years ago24:37

24:37

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Michael turns the microphone on Jason for a very special episode of the Piracy Impact Podcast! Hear Jason’s software license compliance origin story and how he made the transition from sales to compliance before joining Revulytics (www.revulytics.com). Jason also shares his thoughts on the different approaches to dealing with infringers from an inside sales approach, to audits, to legal. He also discusses what it is like to work with existing customers who are also infringing, the growing use of data in license compliance, and best practices he has developed over the years.…

1
Piracy Impact Episode 12 McInnes & McLane 36:09

3 years ago36:09

36:09

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael travel to Worcester, Massachusetts to speak with John McInnes and Jodi McLane, founding partners of intellectual property law firm McInnes & McLane (mcmcip.com/). John and Jodi discuss the importance of software vendors laying the groundwork to protect their intellectual property rights and the trends they are seeing in software license enforcement. They also talk about different approaches to dealing with infringers and how to find balance between enforcement and sales. With a focus on understanding and achieving their clients’ business goals, you won’t want to miss this episode.…

1
Piracy Impact Episode 11 Vinod Moza Cadence Design Systems 23:09

3 years ago23:09

23:09

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com In this episode we share our final interview from our event in Paris where Jason spoke with Vinod Moza, Senior Group Director and Worldwide Head, License Compliance, at Cadence Design Systems. Vinod shares that “once confronted with the [infringement] data, it was real” and how piracy is a “problem, but also an opportunity.” He also discusses the importance for software vendors to focus on their license compliance philosophy and then do the pre-work that will lead to mutually beneficial outcomes. Speaking about his own philosophy, he stresses the importance of being customer-centric: helping customers become compliant, building relationships, keeping their environments free of malware, and leveling the playing field when their competitors use pirated software.…

Revenera Software Pulse

1
Piracy Impact Episode 10 Rafael Amaral, Senior Partner at Kasznar Leonardos Intellectual Property 25:32

3 years ago25:32

25:32

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason speaks with Rafael Amaral, senior partner at Brazilian intellectual property law firm Kasznar Leonardos (www.kasznarleonardos.com.br/). Rafael had just stepped off the stage from presenting at Revulytics’ recent conference in Paris, so he was ready to share his thoughts on dealing with software piracy in Brazil. From outlining the enforcement of intellectual property rights in Brazil, to an interesting approach to leveraging the large volume of ISP data they are seeing in infringement reports, you won’t want to miss this episode.…

Revenera Software Pulse

1
Piracy Impact Episode 9 TopSolid Dominique Laffret 14:28

3 years ago14:28

14:28

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com We feature another conversation from Jason’s trip to Paris when he spoke with Dominique Laffret, VP at leading CAD/CAM vendor TopSolid. Dominique discusses how they decided they needed to track and measure the illegal use of their software and how they have been growing their compliance program. He also talks about the importance of fairness, and protecting current customers from their competitors using pirated software.…

Revenera Software Pulse

1
Piracy Impact Episode 8 Law 21's Borja Suarez 21:20

3 years ago21:20

21:20

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason traveled to Paris and spoke with Borja Suarez, a lawyer specializing in intellectual property law working in international environments at Law 21 in Madrid. Borja talks about the different methods of engagement when doing software license compliance work in South America and some of the common themes and approaches. He tells Jason about the importance of finding a solution that works for both sides and shares a great story from Ecuador.…

Revenera Software Pulse

1
Piracy Impact Episode 7 Gerber Technology's Sam Simpson 27:40

3 years ago27:40

27:40

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael hit the road to Connecticut again - this time to talk to Gerber Technology's VP and GM Sam Simpson (www.gerbertechnology.com). Sam talks about his more than 40 years at Gerber starting as a software engineer and now as vice president of the company's global strategic accounts with responsibility for managing, maintaining and expanding relationships with key enterprises, agents and distributors worldwide. He shares how Gerber evolved to view software piracy as an opportunity and the importance of communication when building a compliance program.…

Revenera Software Pulse

1
Piracy Impact Episode 6 MSA IP's Milos Bogdanovic 33:55

3 years ago33:55

33:55

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael take advantage of the International Trademark Association's (INTA) annual meeting in Boston to speak with MSA IP's Milos Bogdanovic (msa-iplaw.com). MSA IP – Milojevic, Sekulic and Associates is a boutique law firm which specializes in prosecution and litigation of trademarks, patents, designs, as well as in enforcement of Intellectual Property rights in the region of Southeast Europe. From its head office in Belgrade, Serbia, MSA IP directs and coordinates the work of its local offices in nine countries in the region, as well as the work of its associated firms in other neighboring countries. Milos shares how his firm approaches software piracy for its clients and busts some of the myths about enforcing IP rights in the region.…

Revenera Software Pulse

1
Piracy Impact Episode 5 - Former Dassault Systemes Anti-Piracy Head Andy Clarkson (Part 2) 30:37

3 years ago30:37

30:37

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Be sure to start with Episode 4 for part 1! In part 2 of this interview, Michael continues his conversation with former Dassault Systemes Anti-Piracy and Compliance Head Andy Clarkson. Andy shares more about the evolution of approaches to software piracy with some interesting parallels to his work in UK law enforcement. He also discusses how smaller software vendors can apply his 4E approach to license compliance. Andy is currently a Licence Compliance consultant at AND-CCONSULTING LTD (andrew.clarkson@and-cconsulting.com).…

Revenera Software Pulse

1
Piracy Impact Episode 4 - Former Dassault Systems Anti-Piracy Head Andy Clarkson (Part 1) 32:42

3 years ago32:42

32:42

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com In part 1 of this interview, Michael talks to former Dassault Systemes Anti-Piracy and Compliance Head Andy Clarkson about leaving a 24 year career in UK law enforcement to build a career at IBM and Dassault addressing software piracy. Andy shares his 4E approach to converting software pirates to paying customers and the growing importance of data in those efforts. Andy is currently a Licence Compliance consultant at AND-CCONSULTING LTD (andrew.clarkson@and-cconsulting.com).…

Revenera Software Pulse

1
Piracy Impact Episode 3 - Anand & Anand's Shantanu Sahay 27:30

3 years ago27:30

27:30

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael take advantage of the International Trademark Association's (INTA) annual meeting in Boston to speak with Anand & Anand's Shantanu Sahay (www.anandandanand.com). Anand and Anand is among the largest practices specializing in Intellectual Property laws in India and is ranked among the Top Tier Intellectual Property Law Firms in Asia. Shantanu shares how his firm is helping software vendors protect their intellectual property in India and discusses how its approach has changed over the years with the country's increased focus on protecting IP rights.…

Revenera Software Pulse

1
Piracy Impact Episode 2: CNC Software's Gary Hargreaves 26:13

3 years ago26:13

26:13

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Jason and Michael take a trip to Connecticut to talk to leading CAD/CAM vendor CNC Software's Chief Legal Officer, Gary Hargreaves (www.mastercam.com). Gary shares the story of his involvement in license compliance, how CNC approaches software piracy, and the role of its reseller network. His "craziest compliance story" may be one you've never heard before!…

Revenera Software Pulse

1
Welcome to the Piracy Impact Webinar Series 6:41

3 years ago6:41

6:41

The podcast you are about to listen to, was recorded by Revulytics, which is now a part of Revenera. If you want to learn more about the topics of discussion or software monetization in general, reach out to us at www.revenera.com Welcome to episode 1 of the Piracy Impact Podcast from Revulytics where we bring you conversations with leaders from the world of software license compliance with your hosts Jason Swan and Michael Goff. This short episode is a sneak peak of what we have planned - subscribe now before our first series drops!…

Revenera Software Pulse

1
All About the OpenSSL Vulnerabilities 17:47

3 years ago17:47

17:47

In this podcast Revenera experts break down the details of the two high severity OpenSSL vulnerabilities. Want to know what you should be doing to identify and remediate these issues? Listen in to learn more. For more information, visit: www.Revenera.com

Revenera Software Pulse

1
InstallShield 2022 Features and Benefits 8:58

3 years ago8:58

8:58

Revenera introduces the next version of InstallShield. Venkat Ram Donga, Principal Product Manager, talks about InstallShield’s integration with Visual Studio 2022 and support for custom extensions in MSIX projects.

Revenera Software Pulse

1
Open Source: Legal Attribution for OSS Authors 19:06

3 years ago19:06

19:06

When open source components are used, that code is authored by someone who licenses the use of the code to others. Licenses vary and so do the legal obligations of the user. Listen to this podcast to learn about attribution obligations. For more information, visit: www.Revenera.com

Revenera Software Pulse

1
Pursuing Software Piracy Claims in China 35:58

3 years ago35:58

35:58

Whether you look at the latest statistics from the BSA or Revenera’s Top 20 list of Software Piracy Hotspots, China tops the list for the unlicensed use of software. While many software suppliers may choose to ignore software license compliance programs in China, others are seeing significant success protecting their rights and recovering license revenue. Chris Bailey, Principal at Rouse notes: “Software companies are naturally reluctant to use the ‘stick’ of litigation against potential customers but raising the deterrence level is also important to drive licensing deals. Surprisingly, few in the industry have taken advantage of the speed and reliability of China’s courts to settle licensing disputes. The highest compensation amounts have been awarded to major foreign software licensors who understood how to apply the tools available to obtain evidence of piracy. Soon, new legislation and a willingness of the courts to accept technical evidence such as ‘phone home’ tracking software should give an even greater boost to licensors looking for efficient and effective license conversion.” Join us for a conversation with Chris and Landy Jiang, Partner at Lushung, Rouse’s network law firm in China and learn: · How foreign plaintiffs are achieving an average win rate of 83.5% in China · The impact of the Personal Information Protection Law that went into effect in November 2021. on collecting telemetry data on software license infringement · The importance of capturing evidence of infringement because there is no discovery process in China · The elements of building a successful case in China and the role of telemetry data in securing Evidence Preservation Orders For more information, visit www.Revenera.com…

Revenera Software Pulse

1
Understanding the Exploitability of Spring4Shell 15:23

3 years ago15:23

15:23

Revenera Software Pulse

1
Understanding GPL Linking Exceptions 10:09

3 years ago10:09

10:09

What is the difference between Static linking and Dynamic linking? How can users avoid conflict with LGPL licensed code? Get answers to these questions as well as a clear explanation on the basics of GPL linking exceptions. For more information, visit www.revenera.com

Revenera Software Pulse

1
Key Learnings from the Log4Shell Vulnerability 19:20

3 years ago19:20

19:20

Kendra Morton, Product Marketing Manager at Revenera is joined by the returning, Martin Callinan, Director at Source Code Control to talk through the key learnings from the Log4Shell Vulnerability. Kendra and Martin discuss the following in this episode: SBOM Initiatives, Ongoing Diligence, The importance of being proactive versus reactive in controlling and understanding what’s in your code. To watch the first session focusing on, Where are we now with Log4j, use this link: https://youtu.be/UZOtng51ETw For more information, visit www.revenera.com…

Revenera Software Pulse

1
Where are we now with Log4j? 23:12

3 years ago23:12

23:12

Kendra Morton, Product Marketing Manager at Revenera is joined by today’s guest, Martin Callinan, Director at Source Code Control to talk through the the status of Log4j right now. Kendra and Martin discuss the following in this episode: Where are we now? What’s been the fallout? What can we learn from it to apply to our processes? How to be better prepared for the next Log4Shell-type vulnerability down the road? For more information, visit www.revenera.com…

Revenera Software Pulse

1
The Apache Log4j Security Vulnerability 18:35

4 years ago18:35

18:35

In this episode, the Revenera team discusses everything you need to know about the critical Apache Log4j security vulnerability, including what it is, potential impact, and the steps you should take now to mitigate your risk. Pertinent, reliable information can be found at the following links: Blog: https://www.revenera.com/blog/software-composition-analysis/what-you-need-to-know-about-the-log4j-security-vulnerability/ NVD Post: https://nvd.nist.gov/vuln/detail/CVE-2021-44228 Apache Logging Services: https://logging.apache.org/log4j/2.x/security.html…

Revenera Software Pulse

1
Software Composition Analysis Podcast: Software Supply Chain - Episode 2 11:29

4 years ago11:29

11:29

In the second episode of the Software Supply Chain series, Kendra Morton, Software Composition Analysis Product Manager and Alex Rybak, Director of Product Management both from Revenera discuss key considerations focusing on supply chain security. Specifically the episode covers amongst others: Actionable steps when looking to implement or consider supply chain security, License compliance, The biggest impact to the software supply chain.…

Revenera Software Pulse

1
Software Composition Analysis Podcast: Software Supply Chain - Episode 1 13:00

4 years ago13:00

13:00

In the first episode of the Software Supply Chain series, Kendra Morton, Software Composition Analysis Product Manager and Alex Rybak, Director of Product Management both from Revenera discuss key considerations focusing on supply chain security. Specifically the episode covers amongst others: Software supply chain security, Application security, Application security awareness, The importance of the Software Bill of Materials.…

Revenera Software Pulse

1
Managing a Security Incident in an Application: Cybersecurity Awareness Part 3 15:48

4 years ago15:48

15:48

In the third and final episode on the October Cybersecurity Awareness series, Revenera's Kendra Morton and Alex Rybak focus their attention on managing a security incident in an application. Specially the episode will cover: The call comes in. There’s a security breach or security issue with an application. Are there some best practices companies should follow to handle an incident? What are some preventive measures companies can put in place to possibly mitigate future issues early? We’ve covered application security awareness in a series of podcasts. What are some of the top-of-mind takeaways you think our listeners should walk away with?…

Revenera Software Pulse

1
Taking Care of Your Applications with SCA: Cybersecurity Awareness Part 2 18:18

4 years ago18:18

18:18

In the second episode of the Cybersecurity Awareness series, both Kendra Morton and Alex Rybak of Revenera, discuss topics such as: How do you operationalize software composition analysis and why is that important? How do you meet new demands and requests from customers? New regulatory requirements, etc.? Is it important to make software composition analysis part of the company culture?…

Revenera Software Pulse

1
Launch A Successful Security Program: Cybersecurity Awareness Part 1 18:35

4 years ago18:35