Suggestions
Paul Bosco
General Counsel at Sonatype
Paul Bosco is the General Counsel at Sonatype, Inc., a company that specializes in software supply chain management for enterprises.12 As General Counsel, he brings over 20 years of legal experience to the company.4
Professional Background
Prior to joining Sonatype, Paul Bosco served as the General Counsel for Spring Mobile Solutions, Inc.4 He has been with Sonatype since at least December 2013, indicating he has been in his current role for several years.5
Responsibilities
In his position as General Counsel at Sonatype, Paul Bosco:
- Provides legal guidance to the company
- Oversees all legal matters related to Sonatype's operations
Company Context
Sonatype is a developer-friendly, full-spectrum software supply chain management company that provides organizations with control over their cloud-native development lifecycles.1 The company supports 70% of the Fortune 100 and its tools are trusted by 15 million developers worldwide.1
Contact Information
Paul Bosco's professional profile can be found on LinkedIn under the username paul-bosco-7a6618.3 His work address is listed as:
8161 Maple Lawn Blvd Suite 250 Fulton, MD 207596
As a key executive at Sonatype, Paul Bosco is part of a leadership team that includes E. Wayne Jackson III (CEO), Brian Fox (CTO), and other senior executives working to advance the company's mission in software supply chain security and innovation.7
Highlights
Is your #softwaresupplychain as protected as you think it is? Find out in @Sonatype’s latest State of the Software Supply Chain Report: https://bit.ly/3CxIgV0.
I am very proud to be associated with the team who worked very hard to produce this incredibly valuable resource.
#sonatype #softwaresupplychain #linuxfoundation
Everyone who knows anything about me knows that I do not post on any form of social media. And anyone who has heard of the log4j vulnerability has to admit that this is a stunning visualization of the scope of this event: https://lnkd.in/dxCxCMmz
Whatever tools you decide to use to do it, replace vulnerable versions of log4j NOW! If you are not sure where to start, you might find this free scanning tool helpful: https://lnkd.in/dqC8QCdQ
If this vulnerability is serious enough for me to publish this post, it is most certainly serious enough for you to patch your vulnerable apps!! Please do not delay.
Sonatype, #log4j, #apachelog4j, #sbom, #log4shell, #java, #opensource
