Tag: supply chain security
-
Schneier on Security: Delivering Malware Through Abandoned Amazon S3 Buckets
Source URL: https://www.schneier.com/blog/archives/2025/02/delivering-malware-through-abandoned-amazon-s3-buckets.html Source: Schneier on Security Title: Delivering Malware Through Abandoned Amazon S3 Buckets Feedly Summary: Here’s a supply-chain attack just waiting to happen. A group of researchers searched for, and then registered, abandoned Amazon S3 buckets for about $400. These buckets contained software libraries that are still used. Presumably the projects don’t realize…
-
Anchore: DORA + SBOM Primer: Achieving Software Supply Chain Security in Regulated Industries
Source URL: https://anchore.com/blog/dora-overview/ Source: Anchore Title: DORA + SBOM Primer: Achieving Software Supply Chain Security in Regulated Industries Feedly Summary: At Anchore, we frequently discuss the steady drum beat of regulatory bodies mandating SBOMs (Software Bills of Materials) as the central element of modern software supply chain security. The Digital Operational Resilience Act (DORA) is…
-
Anchore: SBOMs 101: A Free, Open Source eBook for the DevSecOps Community
Source URL: https://anchore.com/blog/sboms-101-a-free-open-source-ebook-for-the-devsecops-community/ Source: Anchore Title: SBOMs 101: A Free, Open Source eBook for the DevSecOps Community Feedly Summary: Today, we’re excited to announce the launch of “Software Bill of Materials 101: A Guide for Developers, Security Engineers, and the DevSecOps Community”. This eBook is free and open source resource that provides a comprehensive introduction…
-
Anchore: Increase Supply Chain Transparency & Security with Harbor and Anchore
Source URL: https://anchore.com/webinars/increase-supply-chain-transparency-security-with-harbor-and-anchore/ Source: Anchore Title: Increase Supply Chain Transparency & Security with Harbor and Anchore Feedly Summary: The post Increase Supply Chain Transparency & Security with Harbor and Anchore appeared first on Anchore. AI Summary and Description: Yes Summary: The text discusses a live webinar focused on enhancing supply chain security and compliance for…
-
Anchore: 2025 Cybersecurity Executive Order Requires Up Leveled Software Supply Chain Security
Source URL: https://anchore.com/blog/2025-cybersecurity-executive-order/ Source: Anchore Title: 2025 Cybersecurity Executive Order Requires Up Leveled Software Supply Chain Security Feedly Summary: A few weeks ago, the Biden administration published a new Executive Order (EO) titled “Executive Order on Strengthening and Promoting Innovation in the Nation’s Cybersecurity”. This is a follow-up to the original cybersecurity executive order—EO 14028—from…
-
The Register: Biden signs sweeping cybersecurity order, just in time for Trump to gut it
Source URL: https://www.theregister.com/2025/01/17/biden_cybersecurity_eo/ Source: The Register Title: Biden signs sweeping cybersecurity order, just in time for Trump to gut it Feedly Summary: Ransomware, AI, secure software, digital IDs – there’s something for everyone in the presidential directive Analysis Joe Biden, in the final days of his US presidency, issued another cybersecurity order that is nearly…
-
Docker: Protecting the Software Supply Chain: The Art of Continuous Improvement
Source URL: https://www.docker.com/blog/software-supply-chain-art-of-continuous-improvement/ Source: Docker Title: Protecting the Software Supply Chain: The Art of Continuous Improvement Feedly Summary: Discover how Docker’s tools enhance software supply chain security, empowering teams to innovate securely at every stage of development. AI Summary and Description: Yes Summary: The text emphasizes the critical need for continuous improvement in software security,…