CTO Universe

Top 4 focus areas for securing your software supply chain

CIO

APRIL 24, 2024

The complexity of the software supply chain (SSC) has the potential to expose your organization to greater risk than ever before. In today’s fast-paced software development landscape, managing and securing the software supply chain is crucial for delivering reliable and trusted software releases.

Software

Software Open Source Survey Report

Software supply chain security remains a challenge for most enterprises

TechCrunch

JANUARY 4, 2024

Log4j, maybe more than any other recent security issue in recent years, thrust software supply chain security into the limelight, with even the White House weighing in.

Software

Software Enterprise Virtualization Technology

Software supply chain security is broader than SolarWinds and Log4J

TechCrunch

NOVEMBER 29, 2022

Previously he was staff software engineer and lead for Google’s Open Source Security Team (GOSST). SolarWinds and Log4j have made software supply chain security issues a topic of intense interest and scrutiny for businesses and governments alike. Dan Lorenc is CEO and co-founder of Chainguard. They don’t.

Software

Software Open Source PHP Malware

Survey Surfaces Software Supply Chain Security Challenges

DevOps.com

NOVEMBER 9, 2023

While there is general agreement on the importance of software supply chain security, there is a significant disconnect on how to achieve that goal.

Survey

Survey Software How To Continuous Delivery

Software Composition Analysis: The New Armor for Your Cybersecurity

Speaker: Blackberry, OSS Consultants, & Revenera

Software is complex, which makes threats to the software supply chain more real every day. 64% of organizations have been impacted by a software supply chain attack and 60% of data breaches are due to unpatched software vulnerabilities. In the U.S. alone, cyber losses totaled $10.3

Software Review

Endor emerges from stealth with $25M to secure software supply chains

TechCrunch

OCTOBER 10, 2022

An increasing percentage of the code that companies use to develop software is open source. In a 2018 survey by Tidelift, a software supply chain management platform, 92% of professional software developers said that their apps contained open source libraries. Department of Homeland Security found that one U.S.

Software

Software Open Source Survey Network

Addressing Software Supply Chain Security

DevOps.com

MARCH 15, 2023

It’s essential for organizations to learn more about the software supply chains they rely on and the steps needed to secure them. In just the past few years, we have seen a major uptick in malicious actors exploiting vulnerabilities in software supply chains to facilitate attacks on organizations.

Software

Software Organization Continuous Delivery DevOps

Despite DevOps, Software Supply Chain Security Challenges Persist

DevOps.com

MAY 18, 2023

A survey of 397 IT, cybersecurity and application development professionals conducted by Enterprise Strategy Group (ESG) found that while most respondents work for organizations that have adopted DevOps practices, multiple software supply chain security issues and DevSecOps concerns have yet to be addressed.

DevOps

DevOps Software Survey Groups

Awareness of Software Supply Chain Security Issues Improves

DevOps.com

MARCH 21, 2023

A global survey of 167 software professionals suggested that, while there is a lot more awareness of application security issues, the adoption of DevSecOps best practices is still not pervasive.

Software

Software Open Source Survey Applications

Chainguard lands $5M to help companies secure their software supply chains

TechCrunch

DECEMBER 8, 2021

The spies, working for Russia’s foreign intelligence service, had first targeted SolarWinds, an IT company whose software helps to remotely manage the networks of thousands of businesses, Fortune 500 organizations and federal government agencies. federal government.

Software

Software Open Source Company Network

Red Hat Moves to Secure Software Supply Chains

DevOps.com

MAY 23, 2023

Red Hat today announced a portfolio of cloud services designed to better secure software supply chains. The expanded portfolio includes Red Hat Trusted Application Pipeline to secure continuous integration/continuous delivery (CI/CD) workflows and Red Hat Trusted Content offerings to better secure software components.

Software

Software Continuous Delivery Continuous Integration Cloud

ReversingLabs: Increased Focus on Software Supply Chain Security

DevOps.com

MAY 5, 2023

A global survey of 300 global executives, technology and security professionals found software containing vulnerabilities (82%) followed by secrets leaked through source code (55%), malicious code (52%) and suspicious code (46%) posed a serious risk to the business.

Software

Software Survey Research Technology

Why DevOps is Key to Software Supply Chain Security

DevOps.com

FEBRUARY 21, 2024

Organizations can maintain their DevOps momentum while protecting the software supply chain by shifting security left.

DevOps

DevOps Software Organization Continuous Delivery

Secure Software Summit: The State of OSS Supply Chain Security

DevOps.com

MARCH 15, 2022

The open source software (OSS) supply chain is under attack. As evidenced by the recent Log4Shell vulnerability, the OSS supply chain is increasingly a focus for attackers seeking to exploit weak links in security.

Software

Software Open Source Research Report

The Role of SBOMs in Software Supply Chain Security

DevOps.com

MAY 23, 2023

The software supply chain has become increasingly complex and dynamic with the rise of cloud computing, open source software and third-party software components and APIs. Widespread damage can occur if third-party APIs, cloud services, SDKs and open source software have security flaws.

Software

Software Open Source Cloud Software Development

JFrog Adds Module to Better Secure Software Supply Chains

DevOps.com

OCTOBER 18, 2022

JFrog today added a JFrog Advanced Security module to its Artifactory repository that enables DevOps teams to scan both binaries and source code for vulnerabilities and misconfigurations. The post JFrog Adds Module to Better Secure Software Supply Chains appeared first on DevOps.com.

Software

Software DevOps Applications Development

Using Open Source to Secure Software Supply Chains

DevOps.com

JANUARY 18, 2022

Recently, there’s been a lot of attention paid to software supply chain security. The post Using Open Source to Secure Software Supply Chains appeared first on DevOps.com. There are […].

Open Source

Open Source Software Architecture Government

Software Supply Chain Security Debt is Increasing: Here’s How To Pay If Off

DevOps.com

JANUARY 26, 2023

Last year, the world woke up to the software supply chain dilemma. Such supply chain attacks have increased by a shocking 742% over the past […] The post Software Supply Chain Security Debt is Increasing: Here’s How To Pay If Off appeared first on DevOps.com.

Software

Software How To DevOps

Survey Sees Little Progress on Securing Software Supply Chains

DevOps.com

APRIL 12, 2022

A survey of 1,750 IT security decision-makers published today found that, despite a series of high-profile cybersecurity breaches, nearly two-thirds (62%) of respondents have done nothing to secure their software supply chain. And nearly three-fourths (71%) of respondents admitted […].

Survey

Survey Software Software Development Development

DigiCert Allies With ReversingLabs to Secure Software Supply Chains

DevOps.com

JUNE 6, 2023

Deepika Chauhan, chief product officer for DigiCert, said the addition of these capabilities to the DigiCert Software Trust Manager service would make it simpler for organizations to operationalize a methodology for securing […] The post DigiCert Allies With ReversingLabs to Secure Software Supply Chains appeared first on DevOps.com.

Software

Software Analysis Organization Continuous Delivery

Software Supply Chain Security with Trivy: Generating SBOMs

Aqua Security

APRIL 14, 2022

Trivy is an easy-to-use, comprehensive open source scanner that helps developers gain visibility into the software components used in their applications. With the growing awareness about supply chain security, software bills of materials (SBOMs) have become the standard for creating software inventory lists.

Software

Software Open Source Industry Applications

Software Supply Chain Security vs. SCA: What's the Difference?

Aqua Security

FEBRUARY 9, 2023

As reliance on software increases in both personal and professional contexts, security of the software supply chain has become a critical concern. Ensuring the security and quality of software is essential for protecting against digital attacks, data breaches, and other cyber threats.

Software

Software Analysis Data

DORA Report 2022: The Magnitude of Software Supply Chain Security

DevOps.com

APRIL 25, 2023

The term ‘software supply chain security’ (SSC) can be interpreted in many ways. Following the White House executive order in May 2021 and the European Cyber Resilience Act (CRA) of 2022, both governments and corporations are taking a more active role in ensuring their software is secure.

Report

Report Software Government Continuous Delivery

Google Looks to Secure Software Supply Chains

DevOps.com

OCTOBER 11, 2022

At the Google Cloud Next ’22 conference, Google today launched a managed Software Delivery Shield (SDS) service to enable DevOps team to store, manage and secure the build artifacts in Artifact Registry. The post Google Looks to Secure Software Supply Chains appeared first on DevOps.com.

Software

Software Google Cloud Conference DevOps

Google Allies With GitHub to Secure Software Supply Chains

DevOps.com

APRIL 7, 2022

Google today revealed it has been working with GitHub to create a forgery-proof method for signing source code as part of an ongoing effort to better secure software supply chains. The post Google Allies With GitHub to Secure Software Supply Chains appeared first on DevOps.com.

Software

Software Open Source Programming Technology

Securing the Software Supply Chain with Behavioral Analysis

DevOps.com

DECEMBER 7, 2021

Lately, software supply chains find themselves in a very interesting and uncomfortable position—the industry spotlight—and not in a good way. While significant and costly breaches such as SolarWinds or Kaseya make front-page news, supply chain attack tactics (e.g.

Analysis

Analysis Software Industry Open Source

Software Supply Chain Security – How Not To Get Attacked

CTOvision

JUNE 28, 2021

Read Bernadine Racoma explain how small and medium businesses can protect their software supply chains from cyber threats on MarTech Series : According to the National Cyber Security Centre (NCSC), there are many challenges that organizations face on a day-to-day basis. This is […].

Software

Software Organization

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

DevOps.com

SEPTEMBER 9, 2022

As supply chain attacks become increasingly prevalent, visibility is emerging as a necessity in cybersecurity. One way to improve visibility and secure your software supply chain is with a software bill of materials (SBOM). An SBOM is a list of all the components within a codebase.

DevOps

DevOps Software Open Source Continuous Delivery

Protecting CI/CD Pipelines to Secure the Software Supply Chain

DevOps.com

OCTOBER 7, 2022

Composed of an infrastructure stack of mash-up code, hundreds of open source and commercial components, services and APIs, today’s software supply chain is fraught with security risks. The post Protecting CI/CD Pipelines to Secure the Software Supply Chain appeared first on DevOps.com.

Software

Software Open Source Infrastructure Applications

Endor Labs Applies Graph Analysis to Secure Software Supply Chains

DevOps.com

OCTOBER 10, 2022

The post Endor Labs Applies Graph Analysis to Secure Software Supply Chains appeared first on DevOps.com.

Analysis

Analysis Software Applications Organization

Scribe Security Unveils Pair of Tools to Secure Software Supply Chains

DevOps.com

JULY 14, 2022

Scribe Security today unveiled a Scribe Integrity tool that scans software artifacts to make sure they comply with IT organizations’ security policies before they are integrated into an application. The post Scribe Security Unveils Pair of Tools to Secure Software Supply Chains appeared first on DevOps.com.

Tools

Tools Software Open Source Authentication

Google Proposes SLSA Framework to Secure Software Supply Chains

DevOps.com

JUNE 21, 2021

Google is proposing organizations adopt a framework for securing the integrity of software artifacts across a software supply chain. The post Google Proposes SLSA Framework to Secure Software Supply Chains appeared first on DevOps.com.

Software

Software Open Source Product Management Organization

GitHub takes aim at software supply chain security

InfoWorld

MAY 9, 2024

GitHub has introduced Artifact Attestations, a software signing and verification feature based on Sigstore that protects the integrity of software builds in GitHub Actions workflows. Artifiact Attestations is now available in a public beta. To read this article in full, please click here

Software

Software Policies Tools

JFrog Gives Pyrsia to CD Foundation to Secure Software Supply Chains

DevOps.com

OCTOBER 26, 2022

At the KubeCon + CloudNativeCon North America conference this week, JFrog announced it contributed the Pyrsia project, which uses blockchain technologies to secure software packages, to the Continuous Delivery (CD) Foundation.

Software

Software Blockchain Continuous Delivery Conference

How to cyber security: Software supply chain risk management

Synopsys

DECEMBER 14, 2021

Effective software supply chain risk management requires security measures throughout the entire supply chain. The post How to cyber security: Software supply chain risk management appeared first on Software Integrity Blog.

Software

Software How To Open Source Analysis

Linux Foundation Project Secures Software Supply Chains

DevOps.com

MARCH 9, 2021

The Linux Foundation today embraced a sigstore project founded by Red Hat, Google and Purdue University to make it simpler for developers to employ cryptographic software, enabled by transparency log technologies, to secure software supply chains.

Linux

Linux Software Engineering Technology

The Role of AI in Securing Software and Data Supply Chains

DevOps.com

APRIL 19, 2024

Expect attacks on the open source software supply chain to accelerate, with attackers automating attacks in common open source software projects and package managers.

Open Source

Open Source Software Data Continuous Delivery

Using Your Pipelines To Harden Your Pipelines: The Importance of CI/CD Security for Your Software Supply Chain

Prisma Clud

DECEMBER 1, 2022

As the systems we use to deliver software to the cloud get more complex and reliant on third-party components, they also leave more opportunities for attacks. Just last year, software supply chain attacks jumped 51% , which is proof that bad (and creative) actors are capitalizing on these weaknesses.

Weak Development Team

Weak Development Team Software Review Software Open Source

Cyber EO May Move Software Supply Chain Security From Neutral to Highway Speed

CTOvision

JUNE 22, 2021

A secure software supply chain has become essential to fulfilling government missions. Massive cyberattacks like SolarWinds highlight the serious risks to the enterprise that insecure software can create.

Software

Software Government Enterprise

Effective software security activities for managing supply chain risks

Synopsys

NOVEMBER 22, 2021

BSIMM12 reports increased attention on software security due to recent supply chain disruptions. Get recommendations for managing supply chain risks. The post Effective software security activities for managing supply chain risks appeared first on Software Integrity Blog.

Software Review

Software Review Software Report Open Source

Coveros Conversations: Software Supply Chain Security

Coveros

MAY 25, 2021

CEO Jeff Payne discusses best practices for protecting your software delivery process from supply chain attacks with Business Development Manager Kim Trott. Today we’re going to be talking about software supply chain attacks with Coveros founder and CEO Jeff Payne. What is a Supply Chain?

Software Review

Software Review Software Open Source Systems Review

Tenable Cyber Watch: NCSC Offers Guidance for Quantum Threat, SBOM Adoption for Securing the Software Supply Chain, and more

Tenable

NOVEMBER 27, 2023

How can SBOM adoption help beef up software supply chain security? Why CISA and NSA are pushing SBOM adoption to help organizations beef up software supply chain security. Why is the U.K. cyber agency urging cyber teams to prepare for quantum computing attacks? Why the U.K.

Artificial Intelligence

Artificial Intelligence Artificial Inteligence Software Policies

The future of cyber security: Software supply chain attacks become a given in 2022

Darktrace

JANUARY 13, 2022

In the first prediction of our Future of Cyber Security series, Justin Fier explains why IT and communications is now the number one most targeted sector and why he expects the number of cyber-attacks on the software supply chain will only continue to rise in 2022.

Software

Should You Use SLSA or CIS Software Supply Chain Security Guidelines?

Aqua Security

JANUARY 12, 2023

With recent software supply chain attacks on the rise, CISOs being held personally liable, and the United States government requiring minimum security software standards for any products and services they procure, the development industry is refocusing on software development strategies that make security a priority.

Guidelines

Guidelines Software Software Development Government

Top 4 focus areas for securing your software supply chain

Software supply chain security remains a challenge for most enterprises

Trending Sources

Software supply chain security is broader than SolarWinds and Log4J

Survey Surfaces Software Supply Chain Security Challenges

Software Composition Analysis: The New Armor for Your Cybersecurity

Endor emerges from stealth with $25M to secure software supply chains

Addressing Software Supply Chain Security

Despite DevOps, Software Supply Chain Security Challenges Persist

Awareness of Software Supply Chain Security Issues Improves

Chainguard lands $5M to help companies secure their software supply chains

Red Hat Moves to Secure Software Supply Chains

ReversingLabs: Increased Focus on Software Supply Chain Security

Why DevOps is Key to Software Supply Chain Security

Secure Software Summit: The State of OSS Supply Chain Security

The Role of SBOMs in Software Supply Chain Security

JFrog Adds Module to Better Secure Software Supply Chains

Using Open Source to Secure Software Supply Chains

Software Supply Chain Security Debt is Increasing: Here’s How To Pay If Off

Survey Sees Little Progress on Securing Software Supply Chains

DigiCert Allies With ReversingLabs to Secure Software Supply Chains

Software Supply Chain Security with Trivy: Generating SBOMs

Software Supply Chain Security vs. SCA: What's the Difference?

DORA Report 2022: The Magnitude of Software Supply Chain Security

Google Looks to Secure Software Supply Chains

Google Allies With GitHub to Secure Software Supply Chains

Securing the Software Supply Chain with Behavioral Analysis

Software Supply Chain Security – How Not To Get Attacked

DevOps World 2022: Using SBOMs to Secure the Software Supply Chain

Protecting CI/CD Pipelines to Secure the Software Supply Chain

Endor Labs Applies Graph Analysis to Secure Software Supply Chains

Scribe Security Unveils Pair of Tools to Secure Software Supply Chains

Google Proposes SLSA Framework to Secure Software Supply Chains

GitHub takes aim at software supply chain security

JFrog Gives Pyrsia to CD Foundation to Secure Software Supply Chains

How to cyber security: Software supply chain risk management

Linux Foundation Project Secures Software Supply Chains

The Role of AI in Securing Software and Data Supply Chains

Using Your Pipelines To Harden Your Pipelines: The Importance of CI/CD Security for Your Software Supply Chain

Cyber EO May Move Software Supply Chain Security From Neutral to Highway Speed

Effective software security activities for managing supply chain risks

Coveros Conversations: Software Supply Chain Security

Tenable Cyber Watch: NCSC Offers Guidance for Quantum Threat, SBOM Adoption for Securing the Software Supply Chain, and more

The future of cyber security: Software supply chain attacks become a given in 2022

Should You Use SLSA or CIS Software Supply Chain Security Guidelines?

Stay Connected