Supplychainsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Cover image for Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

SnykSec for Snyk

Apr 29

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

#supplychainsecurity #python #kubernetes #docker

9 min read

Toni Antunovic

Apr 28

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

#supplychainsecurity #aicode #npm #security

8 min read

DevOps Start

Apr 28

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

#supplychainsecurity #artifactprovenance #slsaframework #devsecopspipeline

8 min read

DevOps Start

Apr 20

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

#githubactionssecurity #oidcauthentication #cicdhardening #supplychainsecurity

7 min read

Apr 20

How Attackers Turned Trivy Into a Weapon Against Cisco

#supplychainsecurity #threatintelligence #shinyhunters #ciscobreach

4 min read

Apr 20

Cisco's Source Code Breach Was Structural, Not Accidental

#cybersecurity #databreach #supplychainsecurity #secretsmanagement

3 min read

SnykSec for Snyk

Apr 11

Governing Security in the Age of Infinite Signal – From Discovery to Control

#applicationsecurity #devsecops #supplychainsecurity #vulnerabilityinsights

7 min read

Cover image for Supply chain security for dependencies

binadit

Apr 7

Supply chain security for dependencies

#supplychainsecurity #dependencymanagement #vulnerabilityscanning #npmsecurity

3 min read

Cover image for JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

SnykSec for Snyk

Apr 24

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

#iacsecurity #opensourcesecurity #supplychainsecurity #vulnerabilityinsights

6 min read

Simon Paxton

Mar 21

Supermicro GPU Smuggling: What the Indictment Reveals

#semiconductorindustry #supplychainsecurity #exportcontrols #aihardware

7 min read

Cover image for The Vulnerability Scanner That Became the Vulnerability

Peter Nasarah Dashe

Mar 31

The Vulnerability Scanner That Became the Vulnerability

#cybersecurity #devsecops #opensource #supplychainsecurity

2 min read

Cover image for How to Detect and Recover From a Compromised Container Scanner

Alan West

Mar 23

How to Detect and Recover From a Compromised Container Scanner

#security #containers #devops #supplychainsecurity

5 min read

Cover image for Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

SnykSec for Snyk

Apr 1

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

#supplychainsecurity

9 min read

SHIBATA Hiroshi

Mar 19

Should RubyGems/Bundler Have a Cooldown Feature?

#ruby #security #supplychainsecurity #packaging

4 min read

nasuy

Mar 26

18,883 MCP servers. Five Chinese tech giants joined this week. Zero security audits.

#ai #security #mcp #supplychainsecurity

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Forem

# supplychainsecurity

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

How Attackers Turned Trivy Into a Weapon Against Cisco

Cisco's Source Code Breach Was Structural, Not Accidental

Governing Security in the Age of Infinite Signal – From Discovery to Control

Supply chain security for dependencies

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

Supermicro GPU Smuggling: What the Indictment Reveals

The Vulnerability Scanner That Became the Vulnerability

How to Detect and Recover From a Compromised Container Scanner

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

Should RubyGems/Bundler Have a Cooldown Feature?

18,883 MCP servers. Five Chinese tech giants joined this week. Zero security audits.