Risk Management June 29, 2023

Is open-source security a ticking cyber time bomb?

4 min read - Software depends on layers of code, and much of that code comes from open-source libraries. According to an Octoverse 2022 report, open-source code is used in 97% of applications. Not only do developers embrace open source, but so do nine…

Risk Management June 28, 2023

A software bill of materials helps secure your supply chain

6 min read - The software supply chain involves developing, maintaining and distributing software to end users. To enhance the functionality of the software being developed, developers frequently depend upon open-source components and libraries. These can be sourced from external vendors like Docker images…

Risk Management March 8, 2023

Securing your supply chain through cyber risk management

4 min read - Supply chain risk is now recognized as a top challenge, with more than half of security breaches attributed to supply chain and third-party suppliers. This can be a costly vulnerability. The global average data breach cost was $4.35 million last…

Intelligence & Analytics December 20, 2022

4 most common cyberattack patterns from 2022

4 min read - As 2022 comes to an end, cybersecurity teams globally are taking the opportunity to reflect on the past 12 months and draw whatever conclusions and insights they can about the threat landscape. It has been a challenging year for security…

Risk Management October 31, 2022

How to effectively manage third-party supply chain risks

3 min read - Third-party risks are widespread in the supply chain and can cause substantial damage. Loss of revenue and sensitive information, operational downtime, legal complications, compliance issues and damaged reputations can all arise from a single breach. If your company lacks a…

Government August 29, 2022

How cybersecurity policy has changed since the SolarWinds attack

3 min read - Major cyberattacks since 2019 jolted the U.S. government and software industry into action. The succeeding years have seen executive orders, new funding, two summits and a newfound resolve. Because of those attacks, the federal government aims to fix the open-source…

News August 17, 2022

64% of security leaders can’t stop a supply chain-related attack

2 min read - Over the past two years, businesses have focused on changing how they work. However, these pandemic changes required a high level of IT support and resources. This often causes deficits in other areas, such as the strength to stop a…

Risk Management July 28, 2022

NIST Supply Chain Security Guidelines: 10 Key Takeaways

3 min read - The U.S. Department of Commerce’s National Institute of Standards and Technology (NIST) recently published updated guidance for reducing cybersecurity risks in supply chains. Titled “Software Supply Chain Security Guidance,” the update is NIST’s response to directives issued by an executive…

Risk Management May 12, 2022

62% of Surveyed Organizations Hit By Supply Chain Attacks in 2021

4 min read - You’ve heard more about the supply chain in the past two years than you ever expected, or likely wanted. But, as a cybersecurity professional, you now have even more reason to pay attention besides not being able to get your…

Intelligence & Analytics March 21, 2022

Supply-Side Hackonomics: Supply Chain Attacks and Data Security

3 min read - Most people now know far more about supply chains than they ever wanted to. Still, anyone could forgive you for not knowing the term ‘supply chain hack’. Often, when the media reports these types of attacks, they name them and…