Software Supply Chain

Organizations, Beware: Protect Against Protestware

May 6, 2022

The term protestware recently made global news when organizations in Russia and Belarus were attacked by malicious code that wiped their computers’ files. This malware was distributed through the popular open source JavaScript library, node-ipc, and was introduced by its maintainer in retaliation for Russia's invasion of Ukraine.

Dark background of silhouettes of computer motherboard showing security vulnerability affecting software supply chain

Cyber Security News

Blackberry Buried Security Vulnerability in OS Until Forced To Disclose by Feds; Was Discovered in April

August 23, 2021

Security vulnerability that impacts an older form of a BlackBerry industrial systems OS, still in use in both industrial settings and hospital equipment, was discovered by Microsoft researchers in April of this year. Many are only now learning about it.

Hands typing on laptop in the dark showing code signing to secure software supply chain

Cyber Security Insights

Threats in the Software Supply Chain: Why Code Signing Best Practices Are Vital To Hardening Security

July 26, 2021

Code signing is like a virtual mechanic, ensuring trust across the software supply chain by validating the identities of source code and verifying that it hasn’t been tampered with. Code signing isn’t new, but it has changed.