Supply Chain
Supply Chain | News, how-tos, features, reviews, and videos
Global companies say supply chain partners expose them to ransomware
A Trend Micro report reveals that 52% of global organizations have a supply chain partner that was hit by ransomware.
How Australia and New Zealand CISOs can get ahead of supply chain attacks
With threats on the rise, Australia and New Zealand CISOs are facing the challenge that an attack on one organisation can become a common vulnerability.
Breaking down CIS's new software supply chain security guidance
The Center for Internet Security offers best practices for securing each phase of the software supply chain.
What is an SBOM? Software bill of materials explained
An SBOM is a detailed guide to what's inside your software. It helps vendors and buyers alike keep track of software components for better software supply chain security.
GitHub to mandate 2FA for all code contributors by 2023
The world’s largest development platform will require all code-contributing users to enroll in two-factor authentication by the end of 2023 to enhance software supply chain security.
Exiger launches data-agnostic supply chain risk platform
With supply chain risks abounding, extra visibility into potential problems could stand manufacturers in good stead.
Anchore Enterprise software SCM platform adds SBOM capabilities
The new release of Anchore's software SCM (supply chain management) platform generates an SBOM (software bill of materials) for individual builds and steps in a development cycle, automatically triggering alerts for possible...
Fortress creates center for security information on energy suppliers
Vendor library offers means to bolster supply-chain security through data sharing and communication.
![Tech Spotlight > Cybersecurity [CSO] > Hands gesture in conversation](https://images.idgesg.net/images/article/2021/03/spot_cybersecurity_02_cso_hands_gestures_talking_by_rawpixel_cc0_abstract_security_by_jeff_hu_gettyimages-1221975486_hero-100879634-small.3x2.jpg?auto=webp&quality=85,70){kind=tracking}
HackerOne calls for end of security by obscurity
The bug hunting platform offers a proposal for greater corporate cybersecurity responsibility and transparency.
3 steps to supply chain resilience
Malicious actors are targeting your third- and fourth-party vendors, causing supply chain disruption and risk to your own network. Mitigate that risk by taking these actions.
Russian cyberspies target cloud services providers and resellers to abuse delegated access
A new Microsoft advisory claims Russia's Nobelium group is trying to gain long-term access to the technology supply chain and offers mitigation advice.
Detecting anomalies with TLS fingerprints could pinpoint supply chain compromises
Researchers at Splunk outline a technique, pioneered by Salesforce, that could detect malicious activity in the software supply chain, but with some limitations.
![Digital fingerprints are virtually connected. [tracking / identity / genetics / data privacy]](https://images.idgesg.net/images/article/2020/09/digital_fingerprints_virtually_connected_identity_genetic_data_privacy_concerns_by_rick_jo_gettyimages-1132147542_2400x1600-100860110-small.3x2.jpg?auto=webp&quality=85,70)
Supply-chain attack on Kaseya remote management software targets MSPs
REvil ransomware pushers exploit zero-day flaw in Kaseya VSA to infect MSPs and their customers.
video
Securing the software supply chain: A structured approach
Managing risk across an extended supply chain is extremely challenging for organizations of all sizes. The sheer volume of connected components that communicate, store, and process data will continue to expand the attack surface, and...
GAO calls out US government agencies: Get your supply chain security act together
The US Government Accounting Office tells Congress that federal agencies have largely ignored its supply chain risk management guidance for nearly ten years.
6 most common types of software supply chain attacks explained
Not all software supply chain attacks are the same. Here are the methods attackers currently use to corrupt legitimate software through third parties.
video
Lessons from the SolarWinds attack on securing the software supply chain
The SolarWinds breach represents a tectonic shift in threat actor tactics, suggesting this kind of attack vector will be replicated. Not only were the attacker’s sophistication and technical proficiency high -- allowing them to stay...
