SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
The Open-Source Trap: Unraveling Open-Source Threats in the Software Supply Chain
The Open-Source Trap: Unraveling Open-Source Threats in the Software Supply Chain (PDF, 1.65MB)Published: 05 Dec, 2024
Created by
Clayton Boozell
The risk to the software supply chain is increasingly clear, as breaches like SolarWinds, Equifax, Event-Stream, and recent PyPI incidents such as revive-jacking, the "ctx" package, and typo-squatting attacks, to name a few.