PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Securing the Supply Chain by Working With Ethical Hackers

hackerone.com | blog | #bug-bounty | #supply-chain | #open-source | #conference | #third-party-risk | #solarwinds | #supply-chain-security | #internet-bug-bounty
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne experts discuss securing the software supply chain with ethical hackers, citing SolarWinds and ENISA supplier-compromise data, and announce an expanded Internet Bug Bounty for open source.
Published
Collected

Related coverage

blog · bishopfox.com
The Dark Side of Convenience: Understanding the Dangers of Digital Supply Chain
Bishop Fox explores digital supply chain dangers: 77% of organizations found unknown participants in their software supply chains, and Gartner expects 45% to face supply chain attacks by 2025.
blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
blog · netspi.com
Top Security Takeaways from Black Hat USA 2022 and DEF CON 30
Recap of Black Hat USA 2022 and DEF CON 30: Kerberos local privilege escalation research, the new open-source PowerHuntShares and PowerHunt tools, and notable trends from this year's shows.
blog · netspi.com
The Importance of Reviewing Source Code for Security Vulnerabilities: Two Years After the SolarWinds Breach
Dive into the secure code review process and learn about the necessary components needed to identify the risk your source code may pose to your organization.
blog · netspi.com
Greatest Moments from Black Hat 2021 and DEF CON 29
NetSPI recap of Black Hat 2021 and DEF CON 29: CISA's new Joint Cyber Defense Collaborative, warnings about escalating software supply chain attacks, and a notably thinner hybrid-event crowd.
blog · netspi.com
Open Source Frameworks – How secure are they?
Open source doesn't mean secure: reviewing one company's untouched framework surfaced nearly 80% of 10,000+ findings, including SQL injection and persistent XSS—vet third-party code accordingly.
Back