In The News
August 21, 2024

Network Computing: How low can you go? The barrier to successful supply chain attacks is dropping

To detect all kinds of software supply chain attacks, software-producing and consuming organizations need to have access to a collection of mature malware intelligence, in addition to complex binary analysis and reproducible builds.
August 19, 2024

The Last Watchdog: Black Hat Fireside Chat: Why grasping the context of code is a recipe for keeping software secure

President Biden’s call for the mainstreaming of Software Bill of Materials (SBOMs) is a major step forward.
August 12, 2024

The Last Watchdog: MY TAKE: Black Hat USA 2024’s big takeaway – GenAI factors into the quest for digital resiliency

GenAI is very much in the mix as a potent X-factor in cybersecurity.
July 29, 2024

SecurityInfoWatch: Can you trust commercial software? Tackling third-party software risk

Supply chain security is rapidly emerging as a material risk for enterprise software buyers.
July 18, 2024

CyberWire Daily Podcast: SSM on-prem flaw is a 10/10 disaster

Guest Tomislav Pericin, Founder and Chief Software Architect of ReversingLabs, joins to discuss their "Free Resource to Conduct Risk Assessments on Open-Source Software."
July 12, 2024

SC Magazine: Ongoing NuGet supply chain attack involves dozens new malicious packages

Nearly 60 new malicious packages have been uploaded to the NuGet package manager to deploy the SeroXen RAT in a supply chain attack that has been underway since last August, The Hacker News reports.