Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond.
ReversingLabs researchers discovered dozens of malicious packages on Python Package Index that mimic popular libraries
This is not a drill: Denis Pushkarev has big debts — and his code is EVERYWHERE
Modeled after MITRE ATT&CK, OSC&R aims to improve software supply chain security. Experts share its hits — and misses.
ReversingLabs’ YARA detection rule for Lorenz can help you find this ransomware in your environment.
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond.
CISA's C-SCRM turns a page on a busy year for federal software supply chain security directives and guidance. Will it move the needle?
Beep, boop; hope, hype: Generative AI isn't ready for prime time. So don't play games with your software development
Software teams face growing supply chain complexity and threats. Here's why your application security team needs to go beyond open source and vulnerabilities.
.webp&w=3840&q=75)
Forrester has assessed that software composition analysis (SCA) has grown into an established market. Here are the highlights for teams tasked with software supply chain security
The Forrester Software Composition Analysis Landscape, Q1 2023 report provides a competitive analysis of SCA tools. Here's how they deliver (and miss) on software supply chain security
Software bills of materials (SBOMs) deliver a ground truth for software teams. Here's how they can protect their supply chains.
Aabquerys is a malicious npm package discovered typosquatting on a legitimate module that downloads malicious components
Welcome to the latest edition of The Week in Security, which brings you the newest headlines from both the world and our team across the full stack of security: application security, cybersecurity, and beyond.
Researcher Eaton Zveare discloses massive back door in Toyota web app exploiting a JsonWebToken used for authentication