North Korean attackers pose as recruiters for financial firms to lure developers into executing trojanized Python projects on their machines as part of fake job interviews.
Supply Chain and Energy/Utilities
Learn More about Energy Pipeline Podcast: Software Supply Chain Security | EP 105
The majority opinion is that a cybersecurity professional body is long overdue and would benefit cybersecurity and cybersecurity practitioners.
Learn More about SecurityWeek: Should cybersecurity leadership finally be professionalized?
AI coding is a big security problem when most security teams are still relying on tools designed for a world where human-written code remains prevalent.
Learn More about CyberScoop: The dual reality of AI-augmented development: innovation and risk