TelcoNews UK - Telecommunications news for ICT decision-makers
United Kingdom

Composition Analysis Stories - Page 2

Global Stories

Composition Analysis stories

Checkmarx partners Carahsoft to expand public sector sales
Data Protection

Checkmarx partners Carahsoft to expand public sector sales

Government buyers will gain wider access to Checkmarx tools as Carahsoft opens procurement routes through reseller networks and federal contracts.

By Mark Tarre • 4 min read • Tue, 16th Jun 2026
Humanoid robots, 0-day defence among Info-Tech trends for '27
Robotics

Humanoid robots, 0-day defence among Info-Tech trends for '27

Agentic AI, zero-day surge, sovereign cloud, and humanoid robots will define IT strategy in 2027, Info-Tech Research Group warns.

By Jake MacAndrew • 5 min read • Thu, 11th Jun 2026
Sonatype names new chiefs as AI demand drives growth
Data Protection

Sonatype names new chiefs as AI demand drives growth

Rising demand for secure AI software development has prompted Sonatype to expand its leadership team and scale operations globally.

By Sofiah Nichole Salivio • 3 min read • Tue, 9th Jun 2026
Software Improvement Group named Gartner leader on debt
DevOps

Software Improvement Group named Gartner leader on debt

The award underscores rising demand for software tools that spot structural risk as AI coding assistants flood enterprise systems with new code.

By Mark Tarre • 5 min read • Sat, 30th May 2026
Socket raises USD $60 million to tackle code risks
DevOps

Socket raises USD $60 million to tackle code risks

The round values the software supply chain security company at USD $1 billion as AI coding boosts the flow of third-party code into production.

By Sofiah Nichole Salivio • 3 min read • Tue, 26th May 2026
ispace & Leicester pact to send spectrometer to moon
Composition Analysis

ispace & Leicester pact to send spectrometer to moon

The pact advances a UK-led instrument towards the Moon as researchers hunt for minerals, volatiles and water ice on future commercial landings.

By Sean Mitchell • 4 min read • Thu, 14th May 2026
Sonatype warns of surge in trusted open-source malware
Application Security

Sonatype warns of surge in trusted open-source malware

Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.

By Shannon Williams • 4 min read • Wed, 15th Apr 2026
Cloudsmith survey finds SBOM gaps before cyber law
DevOps

Cloudsmith survey finds SBOM gaps before cyber law

Most engineering teams could struggle to meet EU Cyber Resilience Act reporting deadlines, with many still handling SBOMs manually or only after incidents.

By Catherine Knowles • 4 min read • Fri, 10th Apr 2026
Malware surge in open source software alarms firms
Malware

Malware surge in open source software alarms firms

Organisations remain exposed as malware in open-source packages surged in 2025, with most advisories and account takeovers reported last year.

By Kaleah Salmon • 4 min read • Fri, 3rd Apr 2026
AppOmni adds Heisenberg mode after LiteLLM supply attack
Virtualisation

AppOmni adds Heisenberg mode after LiteLLM supply attack

The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.

By Sean Mitchell • 4 min read • Fri, 27th Mar 2026
NetRise launches Provenance to trace open source risk
DevOps

NetRise launches Provenance to trace open source risk

Enterprises could spot compromised maintainers sooner, as the new tool maps open-source contributors, dependencies and policy breaches across builds.

By Sean Mitchell • 5 min read • Thu, 26th Mar 2026
Sonatype finds live data beats larger AI models on upgrades
DevOps

Sonatype finds live data beats larger AI models on upgrades

Sonatype says smaller AI tied to live software data can outsecure larger models on dependency upgrades, slashing risk and cost.

By Shannon Williams • 4 min read • Wed, 25th Mar 2026
Cloudsmith adds controls to block risky dependencies
DevOps

Cloudsmith adds controls to block risky dependencies

Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 24th Mar 2026
Veracode launches Fix for open-source vulnerability repair
DevOps

Veracode launches Fix for open-source vulnerability repair

Veracode unveils an AI-driven tool that automatically fixes open-source vulnerabilities, tackling mounting security debt in software supply chains.

By Sean Mitchell • 4 min read • Tue, 24th Mar 2026
Keysight unveils SBOM Manager to meet new cyber rules
Application Security

Keysight unveils SBOM Manager to meet new cyber rules

Keysight debuts SBOM Manager to automate software bills of materials as EU and US cyber rules tighten transparency and compliance demands.

By Shannon Williams • 4 min read • Fri, 20th Mar 2026

Stories from Other Regions

Composition Analysis stories

Sonatype expands Firewall to block malicious packages
Data Protection

Sonatype expands Firewall to block malicious packages

Malicious open source packages are increasingly slipping past spelling checks, exposing developer data and build systems to supply-chain attacks.

By Sean Mitchell • 4 min read • Tue, 2nd Jun 2026
Vulnetix named Australia's first global CVE authority
Malware

Vulnetix named Australia's first global CVE authority

Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.

By Mark Tarre • 3 min read • Tue, 7th Apr 2026
Avocado warns on code repository supply chain attacks
Cloud Security

Avocado warns on code repository supply chain attacks

Australian organisations face fresh risk of cloud and identity compromise as the cyber watchdog reissues its alert on repository attacks.

By Mark Tarre • 4 min read • Tue, 7th Apr 2026