Supply Chain Security
By having a golden image you will put a process in place that allows you to quickly take action when a vulnerability is found...
Hi, what are you looking for?
SecurityWeek
Supply Chain Security
Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.
Funding/M&A
The deal includes certain Phylum assets, including its malicious package analysis, detection, and mitigation technology.
Supply Chain Security
The recent compromise of Cyberhaven’s Chrome extension appears to be part of a broad campaign that started over a year ago.
Supply Chain Security
Cyberhaven and other Chrome extensions were compromised in a supply chain attack targeting Facebook advertising users.
Supply Chain Security
Supply chain attack leads to decentralized application developers downloading backdoored versions of the Solana Web3.js library.
Supply Chain Security
ESET warns of a new reality: “UEFI bootkits are no longer confined to Windows systems alone.”
Supply Chain Security
If after eighteen months, meaningful use of SBOMs is unachievable, we need to ask what needs to be done to fulfill Biden’s executive order.
Endpoint Security
A backdoor feature found in hundreds of Gigabyte motherboard models can pose a significant supply chain risk to organizations.
Nation-State
Proofpoint warns that APT actors linked to Russia, Iran and North Korea are increasingly targeting small- and medium-sized businesses.
Application Security
Red Hat rolls out a new suite of tools and services to help mitigate vulnerabilities across every stage of the modern software supply chain.
Supply Chain Security
China’s government told users of computer equipment deemed sensitive to stop buying products from the biggest U.S. memory chipmaker, Micron.
Supply Chain Security
Security researchers are warning that newly patched vulnerabilities in the Pimcore platform bring code execution risks.
Funding/M&A
Manifest raises $6 million in seed funding to help businesses generate, collect, and manage software bill of materials (SBOMs).
Funding/M&A
Israeli startup Entro launches with $6 million in seed-stage funding and a product to help manage secrets sprawl in the enterprise.
Supply Chain Security
SBOMs can be used for managing risk and determining vulnerability impact, but it’s very hard to build holistic risk models when the data is...
Risk Management
CISA urges organizations to review FCC’s Covered List of risky communications equipment and incorporate it in their supply chain risk management efforts.
Risk Management
The software supply chain security firm adds the Open Policy Agent to its risk analysis engine, increasing flexibility for the creation and enforcement of...
Government
Jen Easterly hopes CISA is allowed to continue its election-related work under new leadership despite “contentiousness” around that part of its mission.
Vulnerabilities
Malware & Threats
Malware & Threats
Government
Law enforcement turns the PlugX malware’s own self-delete mechanism against it, nuking the China-linked trojan from thousands of US machines.
Vulnerabilities
Vulnerabilities
