April 16, 2020

Mining for malicious Ruby gems

Typosquatting barrage on RubyGems software repository users
October 25, 2019

Why you need to prioritize development and software supply chain security

Enterprise software development graduated from the “waterfall” framework of development and operations
October 9, 2019

How to detect software supply chain attacks

There are many reasons software supply chain attacks are attractive to cyber criminals
August 23, 2019

How existing cybersecurity frameworks can curb software supply chain attacks

Implement processes and controls to disrupt attackers
August 22, 2019

The NPM package that walked away with all your passwords

Detecting malware in package manager repositories
August 9, 2019

How detecting high-priority malware will accelerate quality app dev and release

The malware risks to supply chain assets is intense and real; attacks have been seen in the wild at scale