Articles by Tag #supplychainsecurity
Browse our collection of articles on various topics related to IT technologies. Dive in and explore something new!
NPM = Wild Wild West: It's Time to Stop the Madness
For decades, the JavaScript ecosystem has been a welcoming, innovative space where anyone can...
SHA1-Hulud, npm supply chain incident
Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud. We believe this is a second wave of the Shai-Hulud attack. Learn what this attack is and how Snyk is responding.
Embedded Malicious Code in tinycolor and ngx-bootstrap releases on npm
A supply chain attack hit the ngx-bootstrap npm package, embedding malware to steal developer credentials. See affected versions (e.g., 20.0.4-6, 19.0.3) and our playbook to contain the threat and rotate compromised secrets.
Using SBOMs to detect possible Dependency Confusion
Software supply chains have become a focal point for attackers, as modern applications rely heavily...
Behind the Code: A Simple Look at the Software Supply Chain
Whether you're building your first web app or deploying containers in the cloud, you're already using...
Repojacking: Unseen Dangers and Mitigation Strategies.
Software supply chain security has gotten attention since 2020 after the SolarWinds attack. The...
Do not pass GO - Malicious Package Alert
Recently, researchers have found another Software Supply Chain issue in BoltDB, a popular database tool in the Go programming environment. The BoltDB Go Module was found backdoored and contained hidden malicious code.
Supply Chain Security Tools: 6 Breakthrough Platforms for Managing Third-Party Risk and Dependency Vulnerabilities at Scale
Introduction: The Operational Peril of Third-Party Dependencies Did you know that 73% of...
AI-Driven Supply Chain Security: How Aikido Security, Tenable Nessus AI, and Qualys VMDR Slash Vulnerability Risk and Boost...
Why Supply Chain Security Is the DevOps Achilles’ Heel Have you ever considered how one...
AI Intrusion Detection Software in Logistics: Enhancing Warehouse & Supply Chain Security with Visionfacts
In the current logistics and supply chain world, security threats can interfere with operations,...
Protect Your Code and Your Peace of Mind: How pipq Is Revolutionizing Python Security
In development, every package you install is a potential gateway to hidden risks. Have you ever...