Derek E. Weeks

VP and DevOps Advocate, Sonatype

When Good Code Goes Bad
Blog13 July 2015

What’s Hot on Infosecurity Magazine?

Malware Discovered in 19 Visual Studio Code Extensions

News11 December 2025

Google Releases Critical Chrome Security Update to Address Three Zero-Days

News11 December 2025

Pro-Russia Hackers Target US Critical Infrastructure in New Wave

News10 December 2025

Microsoft Fixes Three Zero-Days in Final Patch Tuesday of 2025

News10 December 2025

UK NCSC Raises Alarms Over Prompt Injection Attacks

News9 December 2025

Critical PickleScan Vulnerabilities Expose AI Model Supply Chains

News2 December 2025

Gartner Calls For Pause on AI Browser Use

News9 December 2025

China-Linked Warp Panda Targets North American Firms in Espionage Campaign

News5 December 2025

Hacker-Tested, Security-Leader Approved: Five Steps to Stop Modern Fraud

Opinion5 December 2025

React2Shell Under Active Exploitation by China-Nexus Hackers

News8 December 2025

Pro-Russia Hackers Target US Critical Infrastructure in New Wave

News10 December 2025

Log4Shell Downloaded 40 Million Times in 2025

News10 December 2025

Revisiting CIA: Developing Your Security Strategy in the SaaS Shared Reality

Webinar15:00 — 16:00, 11 December 2025

Risk-Based IT Compliance: The Case for Business-Driven Cyber Risk Quantification

Webinar15:00 — 16:00, 23 October 2025

Exposing AI’s Blind Spots: Security vs Safety in the Age of Gen AI

Webinar12:30 — 13:30, 13 November 2025

How Mid-Market Businesses Can Leverage Microsoft Security for Proactive Defenses

Webinar15:00 — 16:00, 6 November 2025

Mastering Identity and Access for Non-Human Cloud Entities

Webinar14:00 — 16:00, 18 September 2025

Cyber Defense in the Age of AI: Stay Ahead of Threats Without Compromising Safety

Webinar15:00 — 16:00, 24 July 2025

Regulating AI: Where Should the Line Be Drawn?

Opinion12 November 2025

What Is Vibe Coding? Collins’ Word of the Year Spotlights AI’s Role and Risks in Software

News Feature11 November 2025

Risk-Based IT Compliance: The Case for Business-Driven Cyber Risk Quantification

Webinar15:00 — 16:00, 23 October 2025

Bridging the Divide: Actionable Strategies to Secure Your SaaS Environments

Blog7 November 2025

NCSC Set to Retire Web Check and Mail Check Tools

News10 November 2025

Beyond Bug Bounties: How Private Researchers Are Taking Down Ransomware Operations

Podcast4 November 2025