The findings come as ReversingLabs' report found that the PyPI repository has witnessed a nearly 60% decrease in malicious package uploads in 2022

The coming new year is a good moment for chief information security officers to reflect upon what they've learned this year and how to apply this knowledge going forward.

Software supply chain attacks are expected to increase in both frequency and severity in 2023

Attacks on open-source and commercial software will continue to rise in 2023, says a new security vendor report on the software supply chain.

A new report from Reversing Labs has found that nearly two years after the SolarWinds Worldwide LLC hack, software supply chain attacks have shown no sign of slowing down or abating

The combination of the executive order and the memo mean SBOMs are going to be important in the not too distant future.