Blog | ReversingLabs | AppSec & Supply Chain Security (23)

September 29, 2022

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

This week: A new bill tasks the CISA Director with tackling open source software security, a leaked LockBit builder is being used by a new ransomware gang, and more.

September 19, 2022

WH memo calls for supply chain security, closer to mandating SBOMs

The new memorandum calls on firms selling software to the federal government to attest to its conformity with NIST security standards. Here's what you need to know.

September 14, 2022

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Here's what you need to know about the new OpenSSF npm security best practices.

September 7, 2022

Enduring Security Framework's software supply chain guidelines: A roadmap for the post-SolarWinds world

The new guidance codifies lessons from the SolarWinds hack, including for securing third-party code and development pipelines. Here are four key takeaways.

September 6, 2022

The SBOM is evolving: 4 key trends boosting software supply chain security

Software bills of materials will never be a panacea for software supply chain security. Here are key trends that will deliver some welcome evolution, however.

August 29, 2022

New malicious packages in PyPI: What it means for securing open source repositories

After a recent discovery of malicious PyPI packages, questions remain about the security community’s ability to mitigate threats posed to open source repositories.

August 18, 2022

6 reasons AppSec teams should shift gears and go beyond legacy vulnerabilities

The NVD represents a minority of software supply chain threats. With attacks surging, teams must shift from legacy vulnerabilities to focusing on malware.

August 12, 2022

NVD Analysis: Why you need to modernize your application security

The NVD as it is today does not tell the full story of software risk. Here's why the NVD — and your software security approach — need to be modernized.

August 11, 2022

The state of cybersecurity: 'Things are going to get worse before they get better,' Krebs tells Black Hat 2022

Chris Krebs challenged Black Hat attendees to consider four factors that will determine cybersecurity's future: tech, bad actors, government, and people.

August 4, 2022

Buckle up for Black Hat 2022: Sessions your security team should not miss

Black Hat is set to return next week with two years of pent up cybersecurity research and discoveries. Here are the talks you don't want to miss.

August 3, 2022

Software supply chain security takes center stage at Black Hat 2022

Black Hat is best known for hardware and traditional software exploits, but this year it showcases more software supply chain security issues—marking the shift in the threat landscape.

August 2, 2022

OpenSSF's open source security mobilization initiative: Inside the 10-point action plan

Here is a run-down of the 10 streams from OpenSSF's Open Source Software Security Mobilization Plan.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

AppSec & Supply Chain Security (23)

The Week in Security: Bill tasks CISA Director with responsibility for open source software security

WH memo calls for supply chain security, closer to mandating SBOMs

OpenSSF's npm best practices: A solid first step for supply chain security — but trust issues remain

Enduring Security Framework's software supply chain guidelines: A roadmap for the post-SolarWinds world

The SBOM is evolving: 4 key trends boosting software supply chain security

New malicious packages in PyPI: What it means for securing open source repositories

6 reasons AppSec teams should shift gears and go beyond legacy vulnerabilities

NVD Analysis: Why you need to modernize your application security

The state of cybersecurity: 'Things are going to get worse before they get better,' Krebs tells Black Hat 2022

Buckle up for Black Hat 2022: Sessions your security team should not miss

Software supply chain security takes center stage at Black Hat 2022

OpenSSF's open source security mobilization initiative: Inside the 10-point action plan

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

AppSec & Supply Chain Security (23)

Topics

Follow us

Subscribe

Special Reports