.jpg)
SBOMS and threat modeling: Why continuous is key
November 30, 2023
In this episode, Matt Rose explains how a comprehensive SBOM can assist with the threat modeling of both existing and future software applications.
Field CISO at ReversingLabs. Matt Rose has an extensive background in application security, object-oriented programming, multi-tier architecture design and implementation, and internet/intranet development. His areas of expertise include Application Security, SAST, DAST, IAST, SCA, DevSecOps, and Threat Modeling. Matt is an accomplished public speaker and has been quoted in 50+ AST industry media publications.
Watch Episode
.png)
EO on AI: What security teams need to know
November 16, 2023
In this episode, Matt Rose digs into the White House’s new executive order on AI, and what it means for software supply chain security.
Software Supply Chain Attacks: How vs. What
October 26, 2023
In this episode, ReversingLabs Field CISO Matt Rose explains why it's key for teams to understand the process by which supply chain attacks happen — and the results of those attacks.
NIST CSF 2.0 is near: A lot has changed in 5 years
October 5, 2023
In this episode, Matt gives an overview of the National Institute for Standards and Technology (NIST)’s newest version of their Cybersecurity Framework (CSF). He points out what’s new in CSF 2.0, such as the addition of governance as a discipline, plus a greater focus on software supply chain security.
EPSS 3.0 + CVSS: Why Prioritizing Software Risk is Key
September 28, 2023
In this episode, Matt explains what the newest version of the Exploit Prediction Scoring System (EPSS) is, and how it compares to the Common Vulnerability Scoring System (CVSS) when it comes to minimizing alert fatigue — and prioritizing the highest-risk vulnerabilities.
Happy Birthday, ReversingGlass!
September 21, 2023
In this week’s episode, we’re celebrating ReversingGlass’s first trip around the sun! In honor of the show’s birthday, Matt is looking for feedback and ideas from viewers on what kinds of episodes he should make for ReversingGlass’s second year. If there’s a topic you want Matt to do a glassboard on, please email him at matthew.rose@reversinglabs.com.
How Software Supply Chains Go Wrong
September 7, 2023
In this episode, Matt compares his recent move into his new home to software production, making a strong point that no matter how great your team and efforts are, mistakes are still inevitable in the build and release process.
CISA Secure by Design/Secure by Default is HARD
August 31, 2023
In this episode, Matt explains why CISA's Secure by Design, Secure by Default policy is great in concept, but is actually difficult to execute in the real-world. This is because the policy can really only be applied to new software that hasn't been released yet to the market.
Watch Episode
Trust in Your Software Must be Complete
August 24, 2023
In this episode of ReversingGlass, Matt makes the essential point that trust in your software supply chain is all or nothing. He explains that trusting anything less than 100% of the components in your software package will set your organization up for major risk. This is why trust in software supply chains needs to be complete, so that the risk of a software supply chain attack to your organization can be minimized.
Why the time is NOW for Software Supply Chain Security
August 10, 2023
In this episode, Matt explains why organizations need to strengthen their software supply chain security efforts immediately, given the increase in both the speed and complexity of development environments.
