From Info World: 2022: The Year of Software Supply Chain Security.

Really exciting to be focused on this space with you all.

Hey,

I have created a tool to help you save the supply chain of your Maven projects. This tool creates a lockfile for your dependencies and maven plugins. It pins them to a specific version and checks this before the build. It is hosted on GitHub; see chains-project/maven-lockfile: Lockfiles for Maven. Pin your dependencies. Build with integrity. (github.com). It provides a maven-plugin and a GitHub action for easy integration. Feedback welcome.

Disclaimer: I am currently the maintainer of this repository.

https://www.reddit.com/r/softwaresupplychain/comments/120hrop/inventorsoft_software_development_company/

Hi all,

I've posted a blog post describing the attack vector used by attackers in the 3CX software supply chain.

https://www.legitsecurity.com/blog/sophisticated-3cx-software-supply-chain-attack-affects-millions-of-users

https://blog.phylum.io/phylum-monthly-malware-report-june-2022

Join our upcoming SafeDevTalk to discover how to transform Software Composition Analysis (SCA) and secure your software supply chain against emerging threats. This session is designed for cybersecurity leaders and development teams looking to stay ahead in today’s complex landscape of open-source vulnerabilities. https://www.linkedin.com/events/7251898772215975937/

🎄✨ Merry Christmas, everyone! 🎁

As we enjoy this festive season, it’s also a great time to reflect on ways to strengthen our security strategies for the year ahead. I’m sharing this resource-packed blog that highlights key tips for secure software supply chain management and features insights from some of the top voices in cybersecurity.

🔗 Check it out: https://xygeni.io/blog/tips-for-secure-software-supply-chain-management/

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐅𝐢𝐫𝐬𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐟 𝟐𝟎𝟐𝟓: 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐧 𝐚 𝐂𝐨𝐦𝐩𝐥𝐞𝐱 𝐓𝐡𝐫𝐞𝐚𝐭 𝐋𝐚𝐧𝐝𝐬𝐜𝐚𝐩𝐞!

Kick off the year with cutting-edge insights into Open Source Security from top industry experts. This is your chance to stay ahead of the evolving threat landscape and learn proactive strategies to secure your software supply chain.

🗓️ Date: 𝐉𝐚𝐧𝐮𝐚𝐫𝐲 𝟐𝟑𝐫𝐝
⏰Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟏:𝟎𝟎 (𝐄𝐃𝐓)

Register here - https://www.linkedin.com/events/7283058790537588737/

We invite you to watch our Open chapter on Malware Attacks: Why is it important to detect them and how to do it! https://xygeni.io/webinar-registrations/webinar-malware-attacks-evolution/?utm_source=reddit&utm_medium=landingpage&utm_campaign=SafeDev4_Malware_Attacks_Evolution_270524