software supply chain

In light of the recent cybercriminal activity, new user sign-ups on the PyPI platform were halted. Currently, an increase in PyPI malicious package uploads is being deemed the reason behind the suspension ...

As sure as long weekends arrive in the western world, so too does news of new supply chain attacks. The easter bank holidays were no exception, with the discovery of a targeted ...

As sure as long weekends arrive in the western world, so too does news of new supply chain attacks. The easter bank holidays were no exception, with the discovery of a targeted ...

Emergency stop button: The Python Package Index was drowning in malicious code again, so they had to shut down registration for cleanup ...

Software vulnerabilities can lead to catastrophic cyberattacks, so understanding the intricacies of your software supply chain has never been more critical ...

The growing importance of software bills of materials (SBOMs) marks a significant shift towards better transparency and security in software management ...

In the wake of transformative advancements in generative artificial intelligence (AI) and machine learning (ML), the landscape of software development is undergoing a significant shift ...

A software bill of materials (SBOM) is not just a list, but a detailed inventory that captures the components and dependencies contained within a piece of software ...

Forking hell: Scrotebots clone thousands of projects, injecting malware millions of times ...

Back in the day, Ivanti disclosed CVE-2021-44529, a critical "code injection" vulnerability in its EPM Cloud Services Appliance (CSA) product ...