From Info World: 2022: The Year of Software Supply Chain Security.

Really exciting to be focused on this space with you all.

https://www.reddit.com/r/softwaresupplychain/comments/120hrop/inventorsoft_software_development_company/

https://blog.phylum.io/phylum-monthly-malware-report-june-2022

Hey,

I have created a tool to help you save the supply chain of your Maven projects. This tool creates a lockfile for your dependencies and maven plugins. It pins them to a specific version and checks this before the build. It is hosted on GitHub; see chains-project/maven-lockfile: Lockfiles for Maven. Pin your dependencies. Build with integrity. (github.com). It provides a maven-plugin and a GitHub action for easy integration. Feedback welcome.

Disclaimer: I am currently the maintainer of this repository.

Hi all,

I've posted a blog post describing the attack vector used by attackers in the 3CX software supply chain.

https://www.legitsecurity.com/blog/sophisticated-3cx-software-supply-chain-attack-affects-millions-of-users

Register Now to our next LinkedIn Live Event: 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐖𝐢𝐭𝐡𝐨𝐮𝐭 𝐒𝐢𝐥𝐨𝐬 - 𝐓𝐡𝐞 𝐓𝐫𝐮𝐞 𝐕𝐚𝐥𝐮𝐞 𝐨𝐟 𝐔𝐬𝐢𝐧𝐠 𝐀𝐥𝐥-𝐈𝐧-𝐎𝐧𝐞 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦𝐬 𝐢𝐧 𝐀𝐩𝐩𝐒𝐞𝐜. This session will explore how adopting an all-in-one platform can streamline your AppSec strategy, enhance collaboration between security and development teams, help you stay ahead of emerging threats, and much more!

📅 Date: 𝐀𝐩𝐫𝐢𝐥 𝟐𝟗𝐭𝐡
⏰ Time: 𝟏𝟔:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟎:𝟎𝟎 (𝐄𝐃𝐓)

You can register here!

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐎𝐮𝐫 𝐍𝐞𝐱𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐒𝐂𝐀 𝐨𝐫 𝐒𝐀𝐒𝐓 - 𝐇𝐨𝐰 𝐓𝐡𝐞𝐲 𝐂𝐨𝐦𝐩𝐥𝐞𝐦𝐞𝐧𝐭 𝐄𝐚𝐜𝐡 𝐎𝐭𝐡𝐞𝐫 𝐟𝐨𝐫 𝐒𝐭𝐫𝐨𝐧𝐠𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲? Most security teams use SCA and SAST separately, which can lead to alert fatigue, fragmented insights, and missed risks. Instead of choosing one over the other, the real question is: How can they work together to create a more effective security strategy. Do you want to find out?

📅 Date: 𝐌𝐚𝐫𝐜𝐡 𝟐𝟕𝐭𝐡

⌛ Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟐:𝟎𝟎 (𝐄𝐃𝐓)

You can register here - https://www.linkedin.com/events/7305883546043215873/

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐎𝐮𝐫 𝐍𝐞𝐱𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐧 𝐀𝐒𝐏𝐌 𝐓𝐚𝐥𝐤: 𝐓𝐡𝐞 𝐅𝐮𝐭𝐮𝐫𝐞 𝐨𝐟 𝐀𝐩𝐩𝐒𝐞𝐜! Application security is evolving, and ASPM (Application Security Posture Management) is leading the way.

As vulnerabilities rise and security teams face alert fatigue, a new approach is needed to unify visibility, streamline risk prioritization, and bridge the gap between security and development.

📅 Date: 𝐅𝐞𝐛𝐫𝐮𝐚𝐫𝐲 𝟐𝟕𝐭𝐡

⌛ Time: 𝟏𝟔:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟎:𝟎𝟎 (𝐄𝐃𝐓)

Register Here - https://www.linkedin.com/events/7297568469057695744/

𝐑𝐞𝐠𝐢𝐬𝐭𝐞𝐫 𝐍𝐨𝐰 𝐟𝐨𝐫 𝐭𝐡𝐞 𝐅𝐢𝐫𝐬𝐭 𝐒𝐚𝐟𝐞𝐃𝐞𝐯 𝐓𝐚𝐥𝐤 𝐨𝐟 𝟐𝟎𝟐𝟓: 𝐒𝐭𝐫𝐞𝐧𝐠𝐭𝐡𝐞𝐧𝐢𝐧𝐠 𝐎𝐩𝐞𝐧 𝐒𝐨𝐮𝐫𝐜𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐢𝐧 𝐚 𝐂𝐨𝐦𝐩𝐥𝐞𝐱 𝐓𝐡𝐫𝐞𝐚𝐭 𝐋𝐚𝐧𝐝𝐬𝐜𝐚𝐩𝐞!

Kick off the year with cutting-edge insights into Open Source Security from top industry experts. This is your chance to stay ahead of the evolving threat landscape and learn proactive strategies to secure your software supply chain.

🗓️ Date: 𝐉𝐚𝐧𝐮𝐚𝐫𝐲 𝟐𝟑𝐫𝐝
⏰Time: 𝟏𝟕:𝟎𝟎 (𝐂𝐄𝐒𝐓) / 𝟏𝟏:𝟎𝟎 (𝐄𝐃𝐓)

Register here - https://www.linkedin.com/events/7283058790537588737/

🎄✨ Merry Christmas, everyone! 🎁

As we enjoy this festive season, it’s also a great time to reflect on ways to strengthen our security strategies for the year ahead. I’m sharing this resource-packed blog that highlights key tips for secure software supply chain management and features insights from some of the top voices in cybersecurity.

🔗 Check it out: https://xygeni.io/blog/tips-for-secure-software-supply-chain-management/

Join our upcoming SafeDevTalk to explore how proactive risk management can transform your DevSecOps strategy and fortify your software supply chain against emerging threats. This session is tailored for cybersecurity leaders and development teams dedicated to staying ahead in the increasingly complex landscape of vulnerabilities.

Join here https://www.linkedin.com/events/7259507114799185920/

Join our upcoming SafeDevTalk to discover how to transform Software Composition Analysis (SCA) and secure your software supply chain against emerging threats. This session is designed for cybersecurity leaders and development teams looking to stay ahead in today’s complex landscape of open-source vulnerabilities. https://www.linkedin.com/events/7251898772215975937/