Software Supply Chain Security

How Trustworthy Is the Software You Use to Protect Your Organization?

April 12, 2023

With the looming software bill of materials (SBOM) mandates going into effect, IT and security teams will be increasingly looking for solutions that assess and mitigate software supply chain risks for all software both built and bought to comply with U.S. Executive Order 14028.

Developers discussing about software supply chain security and attack surface

Cyber Security Insights

What To Know About Software Supply Chain Security in 2023

January 13, 2023

 The software supply chain attack surface is a lot more complicated now, and can be compromised at every stage. Developers are the new high-value targets and we have seen developers fall victim to stolen credentials and secrets, compromised workstations, CI/CD attacks and malicious packages that end up in source code.

Man working on code showing secure software development and software supply chain security

Cyber Security News

Federal Vendors Given a Year to Craft SBOM To Guarantee Secure Software Development and Improve Software Supply Chain Security

September 22, 2022

The government is addressing software supply chain security with new requirements. The OMB has issued a new memorandum that sets a year-long framework for vendors to provide assurances of secure software development.

Computer programmer writing program code showing software supply chain security for open source software

Cyber Security News

Organizations Intensify Software Supply Chain Security Efforts Against Risks Posed by Open Source Prevalence

August 19, 2022

73% of organizations intensified software supply chain security efforts to address risks posed by open source code used by 80% of the companies, a Synopsys/ESG study found.

Software Supply Chain Security

How Trustworthy Is the Software You Use to Protect Your Organization?

What To Know About Software Supply Chain Security in 2023

Federal Vendors Given a Year to Craft SBOM To Guarantee Secure Software Development and Improve Software Supply Chain Security

Organizations Intensify Software Supply Chain Security Efforts Against Risks Posed by Open Source Prevalence

Five Eyes: Chinese Espionage Uses LinkedIn Recruitment to Target Security and Intelligence Officers

Inside Source Claims Anthropic Has Sent Mythos AI Engineers to NSA for Cyber Operations Training

New US National Security Order Calls for Pre-Release Access and Assessment of AI Models

Hackers Hijacked Instagram Accounts by Tricking Meta AI Support Chatbot into Linking Their Email Address