What Constitutes a Software Supply Chain Attack?

We are just halfway through 2021, and have already seen an exceptional increase in open source malware and novel supply chain attacks. And, they seem to just keep coming.  
The post What Constitutes a Software Supply Chain Attack? appeared first … Continue reading What Constitutes a Software Supply Chain Attack?

Kaseya Starts Recovery After REvil Attack

Kaseya is now reporting the software-as-a-service (SaaS) instance of its Virtual System Administrator (VSA) platform will be back online sometime between 4:00 p.m. and 7:00 p.m. EST today. It expects the on-premises editions of VSA to be patched withi… Continue reading Kaseya Starts Recovery After REvil Attack

Biden Executive Order on Cybersecurity Calls for Enhanced Software Supply Chain Security

The newly minted, and highly anticipated, Cybersecurity Executive Order from President Biden, marks the strongest stance ever taken by the Federal government in an attempt to secure our nation’s software supply chains from attack.  For the first t… Continue reading Biden Executive Order on Cybersecurity Calls for Enhanced Software Supply Chain Security

The SolarWinds Software Supply Chain Attack: How Developers Can Protect Applications

If you didn’t know what a software supply chain was – let alone a software supply chain attack – you do now. As someone who’s been researching, studying and talking about this attack vector for the past seven years, the malicious attack on SolarWi… Continue reading The SolarWinds Software Supply Chain Attack: How Developers Can Protect Applications

DevSecOps & Software Supply Chains, Microsoft – Application Security Weekly #64

    Tanya Janca, also known as SheHacksPurple, is a senior cloud advocate for Microsoft, specializing in application, cloud security, and more! Tanya is joining us on the show to talk about DevSecOps and Securing Software Supply Chains! Full Show Notes… Continue reading DevSecOps & Software Supply Chains, Microsoft – Application Security Weekly #64