Press Releases

Sonatype Research Labs Marks 15 Years of Software Supply Chain Intelligence

New research finds attackers are shifting from broad malware campaigns to precision attacks targeting developers, trusted software, and AI-driven ...
Read More

Sonatype Named a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security

Recognized for Completeness of Vision and Ability to Execute
Read More

Sonatype Names Three Industry Veterans to Executive Team to Lead the Next Chapter of Agentic Development

New leaders bring deep expertise in scaling organizations and strengthening market leadership growth amid accelerating demand for secure, AI-driven ...
Read More

Sonatype Firewall Extends Malicious Package Protection to Any Repository

New Sonatype research finds only 9% of brandjacking malware relies on typosquatting alone, as attackers use trusted-looking package names to slip ...
Read More

Sonatype and Package Registry Leaders Unite to Address Open Source Sustainability Crisis

New Linux Foundation initiative convenes registry leaders to develop shared approaches to funding, governance, and long-term ecosystem resilience.
Read More

Sonatype Releases Q1 2026 Open Source Malware Index: Trust Abuse Most Successful Attack Vector

Malicious open source packages reach 1.346 million as attackers abuse trusted software, release paths, and developer workflows
Read More

Sonatype Research Finds AI Coding Safety Gains Rely on Real-Time Software Intelligence, Not Just Larger Models

Across nearly 37,000 software upgrade recommendations, AI grounded in real-time intelligence delivered safer outcomes than larger models operating ...
Read More

Sonatype Research Reveals OSS Malware Grows 75% as Yearly Open Source Downloads Surpass 9.8 Trillion

2026 State of the Software Supply Chain® report finds AI-driven development accelerates risk and expands attack surface, making enforceable AI ...
Read More

Sonatype Introduces Guide, the Intelligent Solution for Secure Agentic Development

New solution connects generative and agentic AI coding assistants to real-time open source intelligence to optimize development speed, reduce ...
Read More

Sonatype Intelligence Reveals CVE Program Leaves Majority of Vulnerabilities Unscored

Inconsistent and delayed open source vulnerability data results in 150,000 false negatives, leaving AI-driven development pipelines exposed
Read More

Sonatype Unveils Nexus One: An AI-Native DevSecOps Platform to Secure and Accelerate Software Innovation

Unifying governance, automation, and open source security across the AI-powered software supply chain
Read More

Sonatype Celebrates Grand Opening of India Innovation Hub in Hyderabad

Inauguration marks milestone in global expansion and AI-driven software security innovation
Read More

Sonatype Announces 2025 Elevate Award Winners & Finalists

Recognizes global organizations pioneering DevSecOps
Read More

Open Source Malware Surges 140% in Q3 as Attackers Target Data and Trusted Dependencies

Sonatype’s OS Malware Index reveals record growth in sophisticated, stealth-first attacks — driven by campaigns targeting npm like the chalk and ...
Read More

Sonatype Named a Visionary on the 2025 Gartner® Magic Quadrant™ for Application Security Testing

Recognized for Completeness of Vision and Ability to Execute
Read More

Sonatype Launches Nexus Repository Cloud for the Gen AI Era

World’s most trusted binary artifact manager now available as a cloud-native, fully managed SaaS offering with built-in malware protection.