OMB has issued a memo directing agencies to adopt a risk-based approach to software and hardware security and rescinding ...

Once upon a time, not long ago, security used to be all about guards patrolling properties, painstakingly doing their rounds, searching for trouble. It is an expensive, not particularly efficient ...

Attackers are Exploiting Trust, Scale, and Automation Across Open-Source and Commercial Software and Emerging AI Ecosystems ...

The White House has revoked software security guidance issued during the Biden administration due to “unproven and burdensome” requirements ...

Adversaries are adopting a more precise approach to supply chain compromise. Organizations need to rethink what “secure ...

As software supply chains grow increasingly interconnected, security threats continue to evolve. While common risks like third-party vulnerabilities and dependency issues are well-known, less-common ...

Customer satisfaction is key to product success. That’s why development teams are often tempted to prioritize application performance and functionality, hoping to introduce necessary cybersecurity ...

Software security may finally be getting the attention it deserves as more countries institute necessary guidelines. But with threats increasing against the software supply chains, it is too soon to ...

Supply chain security is rapidly emerging as a material risk for enterprise software buyers. Yet, despite best efforts from regulators to hold software publishers accountable, enterprise buyers ...

In the beginning, we identified two major types of software supply chain attacks and nine minor types. The world keeps insisting on a broader definition. In the spring of 2020, it really mattered to ...