A new Gartner report provide guidance for organizations aiming to mitigate software supply chain risks, including a call for automated analysis of malware.
The TeamCity incident is similar to SunBurst, which was behind the attack on SolarWinds. But there are differences. Here are lessons learned, to help secure your pipeline.
To advance the state of software supply chain security, the ESF has called for going beyond legacy testing with binary analysis and reproducible builds.
More than 1,500 tokens were exposed, leaving millions of AI models and datasets vulnerable. Here's what your security team can learn from the compromise.
With AI now impacting every organization, it's time to get a handle on security. NCSA and CISA suggest starting with Secure by Design. Don't stop there.
Mature organizations recognize they need to mature their AppSec to keep pace with modern development. Here's why a more holistic AppSec approach is key.
The Threat Modeling Manifesto lays out the how. Now teams must transform this charter into an actionable threat modeling program. Here are 10 key tips.
Get the best of RL Blog delivered to your in-box weekly to stay up to date on key trends, analysis and best practices across threat intelligence and software supply chain security.
