Curated security research, vulnerabilities, advisories and tools for practitioners.

#supply-chain

Security coverage tagged supply-chain. (Page 12)

331.

What We Can Learn from the Accellion Breach

incident | 2021-02-23 00:00 | bishopfox.com | original ↗ | #supply-chain | #incident-response | #third-party-risk

332.

Semperis Expert: SolarWinds Attack Highlights Need to Secure AD

incident | 2021-02-02 16:02 | semperis.com | original ↗ | #cloud | #supply-chain | #active-directory

333.

CRAN Version 4.0.2 Advisory

vulnerability | 2021-01-11 00:00 | CVE-2020-27637 | bishopfox.com | original ↗ | #supply-chain | #path-traversal | #advisory

334.

Hybrid Identity Protection (HIP) Predictions for 2021

blog | 2020-12-23 16:23 | semperis.com | original ↗ | #supply-chain | #ransomware | #resilience

335.

What We Know (And Don’t) About The SolarWinds Orion Hack So Far

blog | 2020-12-15 00:00 | bishopfox.com | original ↗ | #supply-chain | #nation-state | #solarwinds

336.

NotPetya Flashback: The Latest Supply-Chain Attack Puts Active Directory at Risk of Compromise

blog | 2020-12-15 14:33 | semperis.com | original ↗ | #supply-chain | #active-directory | #solarwinds

337.

The Stolen FireEye Red Team Tools Are Mostly Open Source

blog | 2020-12-09 00:00 | bishopfox.com | original ↗ | #supply-chain | #open-source | #fireeye

338.

Avoiding the Hazards of Dependencies - Part 2

blog | 2020-08-03 01:00 | hackerone.com | original ↗ | #supply-chain | #ios | #best-practices

339.

Avoiding the Hazards of Dependencies - Part 1

blog | 2020-07-28 01:00 | hackerone.com | original ↗ | #supply-chain | #android | #ios

340.

How Bug Bounties Help You Shift Left

blog | 2019-11-26 22:00 | hackerone.com | original ↗ | #bug-bounty | #cloud | #supply-chain

341.

Bug Bytes for November 30: Cyber Criminals Never Sleep

blog | 2018-11-30 00:00 | bugcrowd.com | original ↗ | #supply-chain | #javascript | #usps

342.

Open Source: It’s turtles all the way down.

blog | 2018-11-27 00:00 | bugcrowd.com | original ↗ | #cloud | #supply-chain | #open-source

343.

JFrog Xray Drills Deep Down into Your Docker Images

blog | 2018-11-07 07:00 | jfrog.com | original ↗ | #supply-chain | #vulnerability-management | #devsecops

344.

Tracking a stolen code-signing certificate with osquery

blog | 2017-10-10 12:53 | blog.trailofbits.com | original ↗ | #supply-chain | #incident-response | #malware

345.

Flexport leverages bug bounty programs to secure their customers highly confidential shipping data

blog | 2017-02-23 20:31 | hackerone.com | original ↗ | #bug-bounty | #supply-chain | #interview