Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks
hackerone.com | blog | #supply-chain | #threat-intelligence | #side-channel | #data-breach | #mitre | #cwe-top-25 | #opensea
Summary
This week's security roundup covers MITRE's 2022 CWE Top 25 led by out-of-bounds write and XSS, the OpenSea vendor data breach, and supply chain and side-channel attack risks.
- Published
- Collected
--- id: 2751 title: "Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks" source_domain: hackerone.com source_url: "https://www.hackerone.com/blog/security-highlights-new-cwe-rankings-software-supply-chains-and-side-channel-attacks" published_at: "2022-07-05T17:00:00Z" tags: ["supply-chain", "threat-intelligence", "side-channel", "data-breach", "mitre", "cwe-top-25", "opensea"] phying_url: "https://phying.com/item/2751" lang: en --- # Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks ## Summary This week's security roundup covers MITRE's 2022 CWE Top 25 led by out-of-bounds write and XSS, the OpenSea vendor data breach, and supply chain and side-channel attack risks. ## Intelligence Metadata - **Sources:** hackerone.com - **Published:** 2022-07-05T17:00:00Z - **Original:** https://www.hackerone.com/blog/security-highlights-new-cwe-rankings-software-supply-chains-and-side-channel-attacks - **Phying News:** https://phying.com/item/2751