There were some changes to the recently updated OWASP Top 10 list, including the addition of supply chain risks. But old standbys, like broken access control, are still at the top. Software supply ...

Supply chains have faced a steady rhythm of shocks: tariffs, pandemics, labor shortages and shipping bottlenecks, to name a few. Each one arrives suddenly, forcing leaders to react. A wave of U.S.

After Log4j, software supply chains are under more scrutiny for security issues. The US government mandated software bills of materials (SBOMs) for federal software projects so that security teams can ...

Today’s applications are based on numerous components, each of which, along with the development environments themselves, represents an attack surface. Regardless of whether companies develop code ...

Software that prioritizes security at its most foundational level means designing it with customer security as a key goal rather than a tacked-on feature. And that concept — secure by design — is ...

To watch this webinar you’ll need an Infosecurity Magazine account. Log in or sign up below. Get up-to-the-minute news and opinions, plus access to a wide assortment of Information Security resources ...

Editor’s Note: This is the first in a series on Cybersecurity in Supply Chains by SK Jeong, a University of Tennessee professor and digital supply chain researcher experienced in detecting ...

When AI-assisted vulnerability discovery makes it dramatically easier to identify weaknesses hidden inside modern dependency stacks, the cost calculus that made reactive security tolerable no longer ...

A growing market for supply chain sustainability software is being driven primarily by increasing scrutiny from regulators and stakeholders of ESG performance, as well as a greater consideration of ...

It’s software for a hard problem. Now in private beta, a new platform called FRDM from San Francisco-based nonprofit Made in a Free World has launched a digital risk analysis tool for companies ...