Paul Roberts
Recent Posts from Paul Roberts
September 7, 2022
The new guidance codifies lessons from the SolarWinds hack, including for securing third-party code and development pipelines. Here are four key takeaways.
August 22, 2022
Exploring the “how” of CI/CD compromises, researchers show many of the culprits will be familiar to security teams.
August 12, 2022
GitHub updated guidance on using its Copilot AI-powered code bot after researchers showed at Black Hat that it often generates vulnerable code.
June 14, 2022
SolarWinds put software supply chain hacks on the radar. But attacks aren’t new. In fact, they’re much older than you suspect! Here’s a (partial) history.
June 10, 2022
MITRE’s System of Trust framework is aiming to standardize how software supply chain security is assessed. MITRE's Robert Martin explains.
All Stories
Software Supply Chain Security
Dev & DevSecOps
CI/CD Security
Container Security