Tag: supply-chain
-
WordPress Plugins Hit by Supply Chain Attack: Update Now!
A new supply chain attack has impacted several plugins hosted on WordPress.org. This WordPress vulnerability, discovered on June 24th, 2024, by the Wo… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/wordpress-supply-chain-attack/
-
Why SaaS Security is Suddenly Hot: Racing to Defend and Comply
Recent supply chain cyber-attacks are prompting cyber security regulations in the financial sector to tighten compliance requirements, and other indus… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/why-saas-security-is-suddenly-hot.html
-
How Amazon’s decision to ditch Microsoft Active Directory paid off
Amazon’s decision to build its own identity and access management system was an expensive one, but an infamous supply chain attack validated the move…. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366589442/How-Amazons-decision-to-ditch-Microsoft-Active-Directory-paid-off
-
Global, federal commitments to bolster energy supply chain cybersecurity detailed
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/global-federal-commitments-to-bolster-energy-supply-chain-cybersecurity-detailed
-
Runtime Enforcement: Software Security After the Supply Chain Ends
Runtime enforcement is the future of software security, if we can only make it accessible to the developers that understand their applications the bes… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/runtime-enforcement-software-security-after-the-supply-chain-ends/
-
Suspected supply chain attack backdoors courtroom recording software
First seen on theregister.com Jump to article: www.theregister.com/2024/05/24/suspected_supply_chain_attack_backdoors/
-
Eclypsium Overview
An introduction to Eclypsium’s supply chain security, zero trust and device integrity solutions. The post duction to Eclypsium’s supply chain security… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/eclypsium-overview/
-
Software Supply Chain Risks ⎪Cassie Crossley (VP Supply Chain Security, Schneider Electric)
This blog is based on our conversation with Cassie Crossley, Vice President of Supply Chain Security at Schneider Electric. It covers the unique chall… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/software-supply-chain-risks-%e2%8e%aacassie-crossley-vp-supply-chain-security-schneider-electric/
-
#Infosec2024: Supply Chains Remain Hidden Threat to Business
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infosec2024-supply-chains-hidden/
-
Eclypsium and Panasonic Connect North America Partner to Protect Against Digital Infrastructure Threats Below the Surface With Smart Compliance
Portland, OR June 6, 2024 Eclypsium®, the supply chain security company protecting critical hardware, firmware, and software, today announced its coll… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/eclypsium-and-panasonic-connect-north-america-partner-to-protect-against-digital-infrastructure-threats-below-the-surface-with-smart-compliance/
-
BTS #31 Managing Complex Digital Supply Chains Cassie Crossley
Tags: supply-chainCassie has a long history of successfully managing a variety of security programs. Today, she leads supply chain efforts for a very large product comp… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/bts-31-managing-complex-digital-supply-chains-cassie-crossley/
-
#Infosec2024: UK Businesses Faced with Month-Long Recoveries from Supply Chain Attacks
A new BlackBerry survey reveals frequent software supply chain attacks in the UK, highlighting the need for improved security measures and robust guid… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-businesses-recoveries-supply/
-
DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?
IntroductionThe infamous Colonial pipeline ransomware attack (2021) and SolarWinds supply chain attack (2020) were more than data leaks; they were sei… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/devops-dilemma-how-can-cisos-regain.html
-
Shining the Light on Shadow IT: Top Five SaaS Security Tips for Third-Party Risk Management
Security teams often grapple with the uncertainty of data exposure in their SaaS supply chain, especially with third-party SaaS vendors. A proactive a… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/shining-the-light-on-shadow-it-top-five-saas-security-tips-for-third-party-risk-management/
-
The State of Software Supply Chain Security Risks – Weiterhin Schwachstellen in Development-Prozessen
First seen on security-insider.de Jump to article: www.security-insider.de/software-lieferketten-schwachstellen-und-angriffe-a-14f5b9dd27937597125167387d5adf87/
-
Threat Hunting 101: Five Common Threats to Look For
Learn more about supply chain threats and where to find them. The post re about supply chain threats and where to find them. The post re about supply … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/threat-hunting-101-five-common-threats-to-look-for/
-
Most Companies Affected by Software Supply Chain Attacks in the Last Year, Struggling to Detect and React Effectively
Over the past year, a significant portion of global organisations (54%) experienced software supply chain attacks, with many struggling to adapt to th… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/05/16/most-companies-affected-by-software-supply-chain-attacks-in-the-last-year-struggling-to-detect-and-react-effectively
-
Congo Lawyers Say They Have New Evidence On Apple’s Minerals Supply Chain
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35912/Congo-Lawyers-Say-They-Have-New-Evidence-On-Apples-Minerals-Supply-Chain.html
-
Malware-laced JAVS Viewer deploys RustDoor implant in supply chain attack
Malicious actors compromised the JAVS Viewer installer to deliver the RustDoor malware in a supply chain attack. Rapid7 researchers warned that threat… First seen on securityaffairs.com Jump to article: securityaffairs.com/163683/hacking/supplay-chain-attack-javs-viewer.html
-
JAVS courtroom recording software backdoored in supply chain attack
Attackers have backdoored the installer of widely used Justice AV Solutions (JAVS) courtroom video recording software with malware that lets them take… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/javs-courtroom-recording-software-backdoored-in-supply-chain-attack/
-
Courtroom Recording Software Compromised in Supply Chain Attack
Threat actors compromised a popular audio-visual software package used in courtrooms, prisons, government, and lecture rooms around the world by injec… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/05/courtroom-recording-software-compromised-in-supply-chain-attack/
-
Synopsys ‘The State of Software Supply Chain Security Risks Report – Weiterhin Schwachstellen in Development-Prozessen
First seen on security-insider.de Jump to article: www.security-insider.de/software-lieferketten-schwachstellen-und-angriffe-a-14f5b9dd27937597125167387d5adf87/
-
Supply chain attack hits courtroom recording platform
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/supply-chain-attack-hits-courtroom-recording-platform
-
Courtroom Recording Software Hit by Supply Chain Attack
Backdoored Installer Facilitates Full, Remote Takeover, Justice AV Solutions Warns. Attackers backdoored versions of widely used audiovisual recording… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/courtroom-recording-software-hit-by-supply-chain-attack-a-25319
-
Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report
Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7’s 2024 Attack Intelligence Report suggests that this will change… First seen on securityweek.com Jump to article: www.securityweek.com/zero-day-attacks-and-supply-chain-compromises-surge-mfa-remains-underutilized-rapid7-report/
-
Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack
Malicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver … First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/courtroom-software-backdoored-to.html
-
Using Open-Souce and Built-In Tools for Supply Chain Validation
The post Using Open-Souce and Built-In Tools for… First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2024/05/using-open-souce-and-built-in-tools-for-supply-chain-validation/
-
AI Python Package Flaw ‘Llama Drama’ Threatens Software Supply Chain
The Llama Drama vulnerability in the Llama-cpp-Python package exposes AI models to remote code execution (RCE) attacks, enabling attackers to steal da… First seen on hackread.com Jump to article: www.hackread.com/ai-python-package-flaw-llama-drama-supply-chain/
-
The role of AI in securing software and data supply chains
First seen on scmagazine.com Jump to article: www.scmagazine.com/resource/the-role-of-ai-in-securing-software-and-data-supply-chains
-
Ten ways to minimize software supply chain risks
First seen on scmagazine.com Jump to article: www.scmagazine.com/perspective/ten-ways-to-minimize-software-supply-chain-risks