Blog | ReversingLabs | AppSec & Supply Chain Security (7)

March 7, 2024

5 reasons you should consider a career in application security

There are many reasons to consider a role AppSec. But one stands out: Software supply attacks are creating job security and opportunity.

March 6, 2024

NIST CSF 2.0: Better risk management for the new era of supply chain security

NIST's Cybersecurity Framework 2.0 has been released, complete with a new focus on software supply chain security. Here are key takeaways for your team.

March 5, 2024

NIST updates supply chain guidance: 3 ways to pump up your CI/CD security

The National Institute of Standards and Technology has beefed up its guidelines for securing CI/CD environments. Are you ready to bulk up your program?

February 29, 2024

All SBOMs are not created equal: What's required for them to be effective

Here are key challenges with SBOMs, how tools affect their usefulness — and what it will take to make them effective at software supply chain security.

February 27, 2024

Lessons in threat modeling: How attack trees can deliver AppSec by design

Here's what development and application security teams need to know about using attack trees in tandem with threat modeling to lock down their software.

February 15, 2024

5 key takeaways from ESG's software supply chain complexity report

A new report from Enterprise Strategy Group highlights key challenges stemming from the complexity of modern software development. Here are key takeaways.

February 14, 2024

5 notable supply chain compromises

2023 was a big year for software security. Here are the key lessons from last year's major attacks to learn from.

February 13, 2024

Upgrade your AppSec for a new era

Do you trust your AppSec? Upgrade your approach with binary analysis — the next generation of tooling for the era of software supply chain security.

February 8, 2024

OWASP Top 10 for LLM 2.0: 3 key AppSec focus areas emerge

A survey of practitioners drove key areas of focus for the vulnerability list for AI models: data privacy, safety and bias, and mapping of vulnerabilities.

February 7, 2024

Definitive timeline: Federal guidance on software supply chain security

Check out this timeline that lists the major policy items released by the federal government related to software supply chain security.

February 6, 2024

The Cloudflare source code breach: Lessons learned

This latest incident underscores the continuing risks to organizations posed by both third-party software and leaks of development secrets alike.

February 5, 2024

CISO accountability in the era of software supply chain attacks

CISOs need to be treated (and be treated by others) like CFOs. Here's what they need to know — and how they can seize the day and prioritize security.

Software Supply Chain Security

File Security

Security Operations

Products

Technology

Partners

Alliances

Resources

Company

Events

Press

AppSec & Supply Chain Security (7)

5 reasons you should consider a career in application security

NIST CSF 2.0: Better risk management for the new era of supply chain security

NIST updates supply chain guidance: 3 ways to pump up your CI/CD security

All SBOMs are not created equal: What's required for them to be effective

Lessons in threat modeling: How attack trees can deliver AppSec by design

5 key takeaways from ESG's software supply chain complexity report

5 notable supply chain compromises

Upgrade your AppSec for a new era

OWASP Top 10 for LLM 2.0: 3 key AppSec focus areas emerge

Definitive timeline: Federal guidance on software supply chain security

The Cloudflare source code breach: Lessons learned

CISO accountability in the era of software supply chain attacks

Topics

Special Reports

The State of Software Supply Chain Security 2024

Upcoming Webinars

ConversingLabs

AppSec & Supply Chain Security (7)

Topics

Follow us

Subscribe

Special Reports