Supplychainsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Jay Grider

May 21

Socket: Secure Your JavaScript Supply Chain Against AI Threats

#supplychainsecurity #javascript #aithreats #sbom

6 min read

Toni Antunovic

May 14

What LucidShark Would Have Caught Before the TanStack Attack Landed

#supplychainsecurity #sca #tanstack #devsecops

7 min read

Toni Antunovic

May 16

Clinejection: When Your AI Coding Tool Became the Weapon

#promptinjection #supplychainsecurity #devsecops #githubactions

9 min read

Toni Antunovic

May 21

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

#slopsquatting #supplychainsecurity #aicodingagents #npmsecurity

10 min read

SnykSec for Snyk

Apr 29

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

#supplychainsecurity #python #kubernetes #docker

9 min read

Toni Antunovic

Apr 28

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

#supplychainsecurity #aicode #npm #security

8 min read

DevOps Start

Apr 28

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

#supplychainsecurity #artifactprovenance #slsaframework #devsecopspipeline

8 min read

DevOps Start

Apr 20

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

#githubactionssecurity #oidcauthentication #cicdhardening #supplychainsecurity

7 min read

Apr 20

How Attackers Turned Trivy Into a Weapon Against Cisco

#supplychainsecurity #threatintelligence #shinyhunters #ciscobreach

4 min read

Apr 20

Cisco's Source Code Breach Was Structural, Not Accidental

#cybersecurity #databreach #supplychainsecurity #secretsmanagement

3 min read

SnykSec for Snyk

Apr 11

Governing Security in the Age of Infinite Signal – From Discovery to Control

#applicationsecurity #devsecops #supplychainsecurity #vulnerabilityinsights

7 min read

binadit

Apr 7

Supply chain security for dependencies

#supplychainsecurity #dependencymanagement #vulnerabilityscanning #npmsecurity

3 min read

SnykSec for Snyk

Apr 24

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

#iacsecurity #opensourcesecurity #supplychainsecurity #vulnerabilityinsights

6 min read

Peter Nasarah Dashe

Mar 31

The Vulnerability Scanner That Became the Vulnerability

#cybersecurity #devsecops #opensource #supplychainsecurity

2 min read

Alan West

Mar 23

How to Detect and Recover From a Compromised Container Scanner

#security #containers #devops #supplychainsecurity

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# supplychainsecurity

Socket: Secure Your JavaScript Supply Chain Against AI Threats

What LucidShark Would Have Caught Before the TanStack Attack Landed

Clinejection: When Your AI Coding Tool Became the Weapon

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

AI Hallucinated Dependencies Are the New Supply Chain Attack: How to Stop Them

Supply Chain Security Proxy: Move Beyond Vulnerability Scanning

GitHub Actions Security: How to Stop Secret Leaks in CI/CD

How Attackers Turned Trivy Into a Weapon Against Cisco

Cisco's Source Code Breach Was Structural, Not Accidental

Governing Security in the Age of Infinite Signal – From Discovery to Control

Supply chain security for dependencies

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

The Vulnerability Scanner That Became the Vulnerability

How to Detect and Recover From a Compromised Container Scanner