Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 10)

271.

Authorized Agility: Wiz adds Code Security in the FedRAMP offering (Wiz for Gov)

blog | 2024-12-09 12:00 | wiz.io | original ↗ | #cloud | #supply-chain | #appsec

272.

Attestations: A new generation of signatures on PyPI

blog | 2024-11-14 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #pypi | #python

273.

Supply chain attack on lottie-player: everything you need to know

incident | 2024-10-31 12:55 | wiz.io | original ↗ | #supply-chain | #web3 | #npm

274.

Tackling tech sprawl, CISO burnout, NIS 2 now enforceable – OffSec roundup for CISOs

blog | 2024-10-18 10:13 | yeswehack.com | original ↗ | #supply-chain | #vdp | #nis2

275.

Partial SolarWinds reprieve, CrowdStrike lessons, LLM kryptonite – OffSec roundup for CISOs

blog | 2024-10-16 15:00 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #supply-chain

276.

Securing the software supply chain with the SLSA framework

blog | 2024-10-01 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi

277.

Introducing Wiz Code: transform your AppSec with Wiz

blog | 2024-09-10 12:50 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

278.

Audit of Airswift's Supply Chain Financing

research | 2024-08-26 22:00 | blog.quarkslab.com | original ↗ | #supply-chain | #web3 | #smart-contracts

279.

DORA: What You Need to Know

blog | 2024-07-08 16:00 | hackerone.com | original ↗ | #supply-chain | #compliance | #risk-management

280.

110,000 sites affected by the Polyfill supply chain attack

incident | 2024-06-27 00:00 | aikido.dev | original ↗ | #supply-chain | #incident-response | #malware

281.

Exploiting ML models with pickle file attacks: Part 2

blog | 2024-06-11 15:00 | blog.trailofbits.com | original ↗ | #supply-chain | #malware | #python

282.

Supply chain attacks: a new era

blog | 2024-06-10 00:00 | osec.io | original ↗ | #supply-chain | #web3 | #npm

283.

Wiz AI-SPM model scanning: Securely innovate with AI community models

blog | 2024-05-30 11:13 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

284.

Defense in depth: XZ Utils

blog | 2024-04-03 17:33 | wiz.io | original ↗ | #supply-chain | #linux | #xz-utils

285.

Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier

blog | 2024-03-28 16:55 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

286.

Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments

blog | 2024-03-19 00:00 | bishopfox.com | original ↗ | #rce | #supply-chain | #devops

287.

Moving Away from requirements.txt for More Secure Python Dependencies

blog | 2024-02-08 02:08 | hackerone.com | original ↗ | #supply-chain | #dependency-management | #python

288.

Enhancing trust for SGX enclaves

blog | 2024-01-26 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #confidential-computing | #tee

289.

Why is NPM Fetching a Dependency Not in My package-lock.json?

blog | 2024-01-25 06:59 | hackerone.com | original ↗ | #supply-chain | #npm | #package-management

290.

Extend Wiz to your Developers: Enable secure cloud development with agility

blog | 2023-11-27 15:10 | wiz.io | original ↗ | #cloud | #supply-chain | #devsecops

291.

How CISA can improve OSS security

blog | 2023-11-20 14:35 | blog.trailofbits.com | original ↗ | #supply-chain | #memory-safety | #open-source

292.

Our audit of PyPI

blog | 2023-11-14 13:00 | blog.trailofbits.com | original ↗ | #supply-chain | #open-source | #pypi

293.

Ensuring Supply Chain Security: Verify container image integrity with the Wiz Admission Controller

blog | 2023-11-06 17:00 | wiz.io | original ↗ | #supply-chain | #kubernetes | #container-security

294.

The Dark Side of Convenience: Understanding the Dangers of Digital Supply Chain

blog | 2023-09-05 00:00 | bishopfox.com | original ↗ | #supply-chain | #devsecops | #third-party-risk

295.

VDPs Are Good For the Government — and Good For Business

vulnerability | 2023-08-28 16:57 | hackerone.com | original ↗ | #supply-chain | #vdp | #vulnerability-disclosure

296.

Preventing fallout from your CI/CD platform being hacked

blog | 2023-06-19 00:00 | aikido.dev | original ↗ | #cloud | #supply-chain | #cloud-security

297.

Trusted publishing: a new benchmark for packaging security

blog | 2023-05-23 11:00 | blog.trailofbits.com | original ↗ | #supply-chain | #pypi | #authentication

298.

Identity Attack Watch: AD Security News, April 2023

blog | 2023-04-28 11:27 | semperis.com | original ↗ | #supply-chain | #active-directory | #ransomware

299.

Webinar | Cybersecurity in Supply-Chain: Start with Prevention

blog | 2023-04-10 00:00 | ethiack.com | original ↗ | #cloud | #supply-chain | #cloud-security

300.

General Motors Celebrates Long-Term Success With Hackers

vulnerability | 2023-03-15 20:00 | hackerone.com | original ↗ | #bug-bounty | #supply-chain | #case-study

← Previous More →