Gainsight CEO downplays impact of attack that spread to Salesforce environments
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised.
Advertisement
supply chain security
Shai-Hulud worm returns stronger and more automated than ever before
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours.
What’s left to worry (and not worry) about in the F5 breach aftermath
Researchers say the nation-state attacker could cause more serious problems with the BIG-IP source code it nabbed during the attack on F5’s systems.
When ‘minimal impact’ isn’t reassuring: lessons from the largest npm supply chain compromise
Commentary that downplays the compromise’s impact misses the point, the co-founder of Sonatype argues.
The dual reality of AI-augmented development: innovation and risk
AI coding is a big security problem when most security teams are still relying on tools designed for a world where human-written code remains prevalent.
Biden cyber executive order gets mostly plaudits, but its fate is uncertain
At least one key Republican told CyberScoop that he wasn’t happy about the last-minute nature of the EO.
Advertisement
ONCD report: ‘Fundamental transformation’ in cyber, tech drove 2023 risks
Evolving critical infrastructure risks, ransomware, supply chain exploitation, commercial spyware and AI were the top trends, the office reported.
Sisense breach exposes customers to potential supply chain attack
The Cybersecurity and Infrastructure Security Agency is urging Sisense customers to reset credentials and report any suspicious activity.
Supply chain attack sends shockwaves through open-source community
An operation to undermine the software utility XZ Utils has exposed the fragile human foundations on which the modern internet is built.
Security leader Ron Bushar on using software supply chain frameworks to improve security
Bushar shares that Google has worked to build the SLSA framework, allowing organizations to grade their supply-chain maturity and ensure the security lifecycle during modernization.