Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 12)

331.

Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier

blog | 2024-03-28 16:55 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #cloud-security

332.

Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments

blog | 2024-03-19 00:00 | bishopfox.com | Original ↗ | .md | #rce | #supply-chain | #devops

333.

Moving Away from requirements.txt for More Secure Python Dependencies

blog | 2024-02-08 02:08 | hackerone.com | Original ↗ | .md | #supply-chain | #dependency-management | #python

334.

Enhancing trust for SGX enclaves

blog | 2024-01-26 14:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #confidential-computing | #tee

335.

Why is NPM Fetching a Dependency Not in My package-lock.json?

blog | 2024-01-25 06:59 | hackerone.com | Original ↗ | .md | #supply-chain | #npm | #package-management

336.

Extend Wiz to your Developers: Enable secure cloud development with agility

blog | 2023-11-27 15:10 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #devsecops

337.

How CISA can improve OSS security

blog | 2023-11-20 14:35 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #memory-safety | #open-source

338.

Our audit of PyPI

blog | 2023-11-14 13:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #pypi

339.

Ensuring Supply Chain Security: Verify container image integrity with the Wiz Admission Controller

blog | 2023-11-06 17:00 | wiz.io | Original ↗ | .md | #supply-chain | #kubernetes | #container-security

340.

Don't Buy Another Scanner

vulnerability | 2023-10-26 13:23 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #supply-chain

341.

The Dark Side of Convenience: Understanding the Dangers of Digital Supply Chain

blog | 2023-09-05 00:00 | bishopfox.com | Original ↗ | .md | #supply-chain | #devsecops | #third-party-risk

342.

VDPs Are Good For the Government — and Good For Business

vulnerability | 2023-08-28 16:57 | hackerone.com | Original ↗ | .md | #supply-chain | #vdp | #vulnerability-disclosure

343.

3 Software Supply Chain Risks in 2023

blog | 2023-07-12 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #npm | #pypi

344.

Preventing fallout from your CI/CD platform being hacked

blog | 2023-06-19 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #cloud-security

345.

Think Outside the Prompt: Creative Approaches to Attacking AI

blog | 2023-06-08 00:00 | netspi.com | Original ↗ | .md | #ai-security | #supply-chain | #machine-learning

346.

Trusted publishing: a new benchmark for packaging security

blog | 2023-05-23 11:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #pypi | #authentication

347.

Identity Attack Watch: AD Security News, April 2023

blog | 2023-04-28 11:27 | semperis.com | Original ↗ | .md | #supply-chain | #active-directory | #ransomware

348.

Webinar | Cybersecurity in Supply-Chain: Start with Prevention

blog | 2023-04-10 00:00 | ethiack.com | Original ↗ | .md | #cloud | #supply-chain | #cloud-security

349.

3CX Supply Chain Compromise Leads to ICONIC Incident

research | 2023-03-30 11:37 | volexity.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #threat-intelligence

350.

General Motors Celebrates Long-Term Success With Hackers

vulnerability | 2023-03-15 20:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #supply-chain | #case-study

351.

This is No Time to Retreat In Cybersecurity

blog | 2023-02-27 07:00 | bugcrowd.com | Original ↗ | .md | #supply-chain | #risk-management | #bugcrowd

352.

Implementing Nuclei into your GitHub CI/CD pipelines

tool | 2023-01-25 22:38 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #supply-chain | #red-team

353.

Hackers Look Ahead To 2023

research | 2023-01-18 00:03 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #supply-chain

354.

Announcing a stable release of sigstore-python

blog | 2023-01-13 15:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #cryptography

355.

9 Trends That Will Dominate Cybersecurity in 2023

blog | 2022-12-20 00:00 | netspi.com | Original ↗ | .md | #ai-security | #supply-chain | #web3

356.

Operational Resilience: More than Disaster Recovery

blog | 2022-12-07 21:30 | semperis.com | Original ↗ | .md | #supply-chain | #ciso | #operational-resilience

357.

ABI compatibility in Python: How hard could it be?

blog | 2022-11-15 12:30 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #memory-safety | #python

358.

We sign code now

blog | 2022-11-08 12:30 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #open-source | #cryptography

359.

Secure your machine learning with Semgrep

blog | 2022-10-03 13:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #supply-chain | #machine-learning

360.

Security Highlights: New CWE Rankings, Software Supply Chains, and Side-Channel Attacks

blog | 2022-07-05 17:00 | hackerone.com | Original ↗ | .md | #supply-chain | #threat-intelligence | #side-channel

← Previous More →