Will npm's new security steps stop attacks?
While 2FA and trusted publishing help, you need visibility into how packages behave — not just who is publishing.
Jaikumar Vijayan
Freelance technology journalist. A former Senior Editor of Computerworld, Jai is a journalist and technology content writing specialist, with 20+ years of award-winning experience in IT trade journalism. He is a correspondent for the Christian Science Monitor and a contributor to Dark Reading, eWEEK, Datamation, IBM Security Intelligence, and Third Certainty. He writes features and covers breaking news stories on information security, data privacy, and big data/business analytics. His recent projects include ERP case studies and an e-book on enterprise mobility management best practices.
Posts from Jaikumar Vijayan
Will npm's new security steps stop attacks?
The call for funding of open-source platforms
Funding of the OSS ecosystem has reached a crisis as threat actors increasingly target weaknesses in infrastructure.
CVE-Genie raises stakes in the vulnerability race
While security defenders welcomed the new vulnerability-validation tool, others stress it can be just as useful for would-be attackers.
CISA’s SBOM standards: Beyond checkbox security
The new guidance would raise the bar for software vendors, who will need to ensure the SBOMs they generate are more detailed and machine-readable.
PyPI domain resurrection fix: Why it matters
With attacks on popular repositories on the rise, PyPI has moved to head off a common technique for duping developers. Here’s what it accomplishes — and where there’s room for improvement.
Why AI coding security features are not enough
Integrated security in AI assistants could help to catch code flaws — but they are only one layer in a comprehensive AppSec strategy.
How to implement PaC for a more secure SDLC
Policy as Code is emerging as a key area of focus for AppSec teams in the age of cloud-native development. But implementation can be daunting.
AI security tools and hype: Report breaks down key considerations
The Latio AI Security Report highlights how marketing hype is creating confusion — and hurting security outcomes. Here are the top takeaways.
CISO's open letter on third-party software risk is a call to action
JPMorganChase's Pat Opet has raised a red flag. Learn why — and how SaaSBOMs can help your organization get a handle on risk.