Supply chains have faced a steady rhythm of shocks: tariffs, pandemics, labor shortages and shipping bottlenecks, to name a few. Each one arrives suddenly, forcing leaders to react. A wave of U.S.

There were some changes to the recently updated OWASP Top 10 list, including the addition of supply chain risks. But old standbys, like broken access control, are still at the top. Software supply ...

Geoffrey Mattson is the CEO of Xage Security, delivering zero-trust access and protection that’s easy to deploy, manage, and use. In recent years, open-source software has become deeply ingrained in ...

Get instant access to watch this webinar with a free Infosecurity Magazine account. Earn CPE credits on qualifying content and explore our full range of webinars, whitepapers, and feature articles, ...

The significance of Anthropic’s Mythos lies less in the model itself than in the broader shift it represents. AI is now capable of autonomously discovering vulnerabilities across large codebases, ...

A new report out today from software supply chain company JFrog Ltd. warns that an expansion of artificial intelligence technology across the software supply chain has resulted in an alarming rise in ...

The acquisition of the startup will enhance Veracode’s capabilities around protecting against malicious open-source code, according to the cybersecurity vendor. Veracode said that its acquisition of ...

Editor’s Note: This is the first in a series on Cybersecurity in Supply Chains by SK Jeong, a University of Tennessee professor and digital supply chain researcher experienced in detecting ...

A growing market for supply chain sustainability software is being driven primarily by increasing scrutiny from regulators and stakeholders of ESG performance, as well as a greater consideration of ...

In recent years, software supply chain attacks have moved from the periphery of concerns to the forefront. According to Verizon's "2024 Data Breach Investigations Report," the use of vulnerabilities ...

Application security company Veracode Inc. today announced that it had acquired certain assets from software supply chain security company Phylum Inc. for an undisclosed price. Under the deal, ...