Latest posts tagged with #SoftwareSupplyChainSecurity on Bluesky
HUGE NEWS! 📣
The "father of SBOM," @allanfriedman.bsky.social, is joining Anchore as a Board Advisor!
We sat down with him to discuss the future of #SoftwareSupplyChainSecurity and what comes after SBOM.... anchore.com/blog/anchore-welcomes-sb...
#NPM: A malicious npm package '@openclaw-ai/openclawai' is spreading a full RAT #malware disguised as an #OpenClaw installer. It steals browser data, macOS Keychain entries, crypto wallets, MacOS and cloud credentials:
#SoftwareSupplyChainSecurity
👇
BSIMM16 reinforces that #AIcoding is the new reality — and it will further destabilize #softwaresupplychainsecurity.
So step up your #AppSec. 👇
www.reversinglabs.com/blog/bsimm16...
The 2026 Ortelius BlogAThon is officially started. Whether you’re just starting out or you’ve been in the trenches of #softwaresupplychainsecurity, we want to hear your voice. Submit a blog between April 1st and July 1st to earn a badge. Learn more at: https://cstu.io/814c6b
#trivy: The GitHub repo of Cloud Security and Supply Chain Security vendor Aqua Security popular vulnerability scanner tool 'trivy' was compromised yesterday via GitHub Actions:
#SoftwareSupplyChainSecurity
👇
#NPM: If previously attackers hijacked NPM packages to install credential-stealing and data-stealing malware, in this latest hijack of Cline CLI the attackers installed #OpenClaw:
#SoftwareSupplyChainSecurity
👇
HUGE NEWS! 📣
The "father of SBOM," @allanfriedman.bsky.social, is joining Anchore as a Board Advisor!
We sat down with him to discuss the future of #SoftwareSupplyChainSecurity and what comes after SBOM.... anchore.com/blog/anchore-welcomes-sb...
#NPM: New Shai-Hulud–like supply chain worm is actively targeting the npm ecosystem with at least 19 malicious npm packages designed to steal developer & CI/CD secrets & automatically spread across repositories & workflows:
#SoftwareSupplyChainSecurity
👇
socket.dev/blog/sandwor...
⛓️ The recent compromise of Notepad++ underscores supply chain attack method diversification. It also serves as a reminder for why going beyond implicit trust is a must: hubs.ly/Q041-Cb30
#SoftwareSupplyChainSecurity #AppSec #DevSecOps
#ReactNative: Critical vulnerability in Metro server for #React Native CVE-2025-11953 allows unauthenticated attackers to execute arbitrary OS commands via a POST request is actively exploited - patch now!
#Metro4Shell
#SoftwareSupplyChainSecurity
👇
www.bleepingcomputer.com/news/securit...
🪞We looked back on what we predicted the #SoftwareSupplyChainSecurity threat landscape would be in 2025. Here's what we got right — & wrong: https://bit.ly/49UKS19
#Notepad++ Official Update Mechanism Was Hijacked to Deliver Malware.
Notepad++ downloads between September 2 - December 2, 2025 were diverted to malicious servers.
#SoftwareSupplyChainSecurity
👇
📣 RL's 4th annual report on the state of #SoftwareSupplyChainSecurity is now available: https://bit.ly/3Fq6F3W
#AppSec #DevSecOps
HUGE NEWS! 📣
The "father of SBOM," @allanfriedman.bsky.social, is joining Anchore as a Board Advisor!
We sat down with him to discuss the future of #SoftwareSupplyChainSecurity and what comes after SBOM.... anchore.com/blog/anchore-welcomes-sb...
#Python : Malicious #PyPI Package called 'sympy-dev' Impersonates #SymPy, Deploys XMRig Miner on Linux Hosts:
#SoftwareSupplyChainSecurity
👇
NIST has broadened the Secure Software Development Framework (SSDF) to include the full SDLC. Here's what your #AppSec team needs to know: https://bit.ly/3ZksCbk
#DevSecOps #SoftwareSupplyChainSecurity
📆 Next Thursday: RL researchers break down real-world campaigns uncovered in the closing months of 2025 across NuGet, PyPI, PowerShell & VS Code: https://bit.ly/4sCIh3f
#SoftwareSupplyChainSecurity #Dev #Cybersecurity
⛓️💥 Eligibility for #CyberInsurance could hinge on the strength of #SoftwareSupplyChainSecurity & third-party risk management controls: https://bit.ly/3NmbJu5
#Cybersecurity #DevSecOps
🧵Introducing: 🚨New Feature Alert → a series dedicated to RL product updates! This week, we’re excited to unveil a dedicated #Malware page in the RL-SAFE Report: app.arcade.software/share/H7euVM...
#SoftwareSupplyChainSecurity #DevSecOps
⛓️ The open-source SF² presents security scaling as a strategic resource-allocation challenge rather than a staffing problem. Here's how it helps: https://bit.ly/3YijlQz
#SoftwareSupplyChainSecurity #DevSecOps #CISO
HUGE NEWS! 📣
The "father of SBOM," @allanfriedman.bsky.social, is joining Anchore as a Board Advisor!
We sat down with him to discuss the future of #SoftwareSupplyChainSecurity and what comes after SBOM.... anchore.com/blog/anchore-welcomes-sb...
Pairing RL Spectra Assure for #SoftwareSupplyChainSecurity with an #EDR solution like #CrowdStrike Falcon offers robust third-party software risk management.👇 https://bit.ly/48GeONR
⛓️💥 Can frameworks stop software supply chain attacks? We ask this in the latest episode of ConversingLabs #podcast: https://bit.ly/3MferkI
#Cybersecurity #SoftwareSupplyChainSecurity #GRC
A new guide on #threatmodeling for the cloud in the era of AI has been released by the CSA. It calls out that existing security practices aren't cutting it for the new era: https://bit.ly/447HlJD
#AISecurity #CloudSecurity #SoftwareSupplyChainSecurity
🚨 AI has redefined software risk — shaping how both attackers & defenders operate. Register now to get the breakdown on these shifting dynamics: https://bit.ly/4oqSV9T
#AISecurity #SoftwareSupplyChainSecurity #AppSec
#VSCode: 24 malicious VS Code and #OpenVSX extensions are stealing developer credentials - spreading through popular names like Flutter, React, and Tailwind.
Full list of malicious VSCode extensions in the article below:
#SoftwareSupplyChainSecurity
👇
#npm: Malicious NPM Package eslint-plugin-unicorn-ts-2 Uses Hidden Prompt and Script to Evade #AI Security Tools:
#SoftwareSupplyChainSecurity
👇
👀 Blog with full details & more updates can be found here: t.co/YP35k2Mweq
#npm #OSS #SoftwareSupplyChainSecurity
#NPM: Second Shai-Hulud Infection Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft:
#SoftwareSupplyChainSecurity
👇
@owasp.org has proposed an update to its Top 10 list, which serves as a global standard for #AppSec. Here's what experts are saying about it: https://bit.ly/4iasFPq
#SoftwareSupplyChainSecurity #DevSecOps
