home.social

#softwaresupplychainsecurity — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #softwaresupplychainsecurity, aggregated by home.social.

fetched live
  1. Beth Pariseau @[email protected] ·

    With all the usual big-company hype in the news this week, it was easy to overlook the dramatic rescue of a relatively small player in the crucial #softwaresupplychainsecurity market, but my colleague Benjamin Lutkevich was on the case.

    He covered the eleventh-hour acquisition of hardened-containers provider #Minimus and highlighted its implications for enterprises considering their next #DevSecOps purchase.

    Check it out here: techtarget.com/it-infrastructu

    #softwaresupplychainsecurity #minimus #devsecops
  2. Beth Pariseau @[email protected] ·

    With all the usual big-company hype in the news this week, it was easy to overlook the dramatic rescue of a relatively small player in the crucial #softwaresupplychainsecurity market, but my colleague Benjamin Lutkevich was on the case.

    He covered the eleventh-hour acquisition of hardened-containers provider #Minimus and highlighted its implications for enterprises considering their next #DevSecOps purchase.

    Check it out here: techtarget.com/it-infrastructu

    #softwaresupplychainsecurity #minimus #devsecops
  3. Beth Pariseau @BPariseau ·

    With all the usual big-company hype in the news this week, it was easy to overlook the dramatic rescue of a relatively small player in the crucial market, but my colleague Benjamin Lutkevich was on the case.

    He covered the eleventh-hour acquisition of hardened-containers provider and highlighted its implications for enterprises considering their next purchase.

    Check it out here: techtarget.com/it-infrastructu

    #softwaresupplychainsecurity #minimus #devsecops
  4. Beth Pariseau @[email protected] ·

    With all the usual big-company hype in the news this week, it was easy to overlook the dramatic rescue of a relatively small player in the crucial #softwaresupplychainsecurity market, but my colleague Benjamin Lutkevich was on the case.

    He covered the eleventh-hour acquisition of hardened-containers provider #Minimus and highlighted its implications for enterprises considering their next #DevSecOps purchase.

    Check it out here: techtarget.com/it-infrastructu

    #devsecops #minimus #softwaresupplychainsecurity
  5. Beth Pariseau @[email protected] ·

    With all the usual big-company hype in the news this week, it was easy to overlook the dramatic rescue of a relatively small player in the crucial #softwaresupplychainsecurity market, but my colleague Benjamin Lutkevich was on the case.

    He covered the eleventh-hour acquisition of hardened-containers provider #Minimus and highlighted its implications for enterprises considering their next #DevSecOps purchase.

    Check it out here: techtarget.com/it-infrastructu

    #softwaresupplychainsecurity #minimus #devsecops
  6. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Rust supply-chain attack: the popular `arrayref` crate (245mln downloads) was compromised to run a remote payload at build time. Simply running `cargo build` was enough to get infected:
    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/arrayref-

    #rust #softwaresupplychainsecurity
  7. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Rust supply-chain attack: the popular `arrayref` crate (245mln downloads) was compromised to run a remote payload at build time. Simply running `cargo build` was enough to get infected:
    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/arrayref-

    #rust #softwaresupplychainsecurity
  8. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Rust supply-chain attack: the popular `arrayref` crate (245mln downloads) was compromised to run a remote payload at build time. Simply running `cargo build` was enough to get infected:
    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/arrayref-

    #rust #softwaresupplychainsecurity
  9. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Rust supply-chain attack: the popular `arrayref` crate (245mln downloads) was compromised to run a remote payload at build time. Simply running `cargo build` was enough to get infected:
    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/arrayref-

    #softwaresupplychainsecurity #rust
  10. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Rust supply-chain attack: the popular `arrayref` crate (245mln downloads) was compromised to run a remote payload at build time. Simply running `cargo build` was enough to get infected:
    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/arrayref-

    #rust #softwaresupplychainsecurity
  11. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Snowflake’s GitHub Action introduced via #AI-assisted PR, contained an injection flaw that could be exploited to access sensitive data in Snowflake's internal Jira.
    An example of AI-assisted coding creating real #SoftwareSupplyChainSecurity risk:
    👇
    wiz.io/blog/red-agent-snowflak

    #snowflake #ai #softwaresupplychainsecurity
  12. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Snowflake’s GitHub Action introduced via #AI-assisted PR, contained an injection flaw that could be exploited to access sensitive data in Snowflake's internal Jira.
    An example of AI-assisted coding creating real #SoftwareSupplyChainSecurity risk:
    👇
    wiz.io/blog/red-agent-snowflak

    #snowflake #ai #softwaresupplychainsecurity
  13. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Snowflake’s GitHub Action introduced via #AI-assisted PR, contained an injection flaw that could be exploited to access sensitive data in Snowflake's internal Jira.
    An example of AI-assisted coding creating real #SoftwareSupplyChainSecurity risk:
    👇
    wiz.io/blog/red-agent-snowflak

    #snowflake #ai #softwaresupplychainsecurity
  14. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Snowflake’s GitHub Action introduced via #AI-assisted PR, contained an injection flaw that could be exploited to access sensitive data in Snowflake's internal Jira.
    An example of AI-assisted coding creating real #SoftwareSupplyChainSecurity risk:
    👇
    wiz.io/blog/red-agent-snowflak

    #softwaresupplychainsecurity #ai #snowflake
  15. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #Snowflake’s GitHub Action introduced via #AI-assisted PR, contained an injection flaw that could be exploited to access sensitive data in Snowflake's internal Jira.
    An example of AI-assisted coding creating real #SoftwareSupplyChainSecurity risk:
    👇
    wiz.io/blog/red-agent-snowflak

    #snowflake #ai #softwaresupplychainsecurity
  16. Sebastian Bergmann @[email protected] ·

    In meinem Vortrag (Samstag, 10:00 Uhr, Hörsaal 7) geht es um Supply Chain Security im PHP-Ökosystem:

    phpunit.expert/presentations/s

    #FrOSCon #FrOSCon26 #PHP #SoftwareSupplyChainSecurity

    #froscon #froscon26 #php #softwaresupplychainsecurity
  17. Sebastian Bergmann @[email protected] ·

    In meinem Vortrag (Samstag, 10:00 Uhr, Hörsaal 7) geht es um Supply Chain Security im PHP-Ökosystem:

    phpunit.expert/presentations/s

    #FrOSCon #FrOSCon26 #PHP #SoftwareSupplyChainSecurity

    #froscon #froscon26 #php #softwaresupplychainsecurity
  18. Sebastian Bergmann @[email protected] ·

    In meinem Vortrag (Samstag, 10:00 Uhr, Hörsaal 7) geht es um Supply Chain Security im PHP-Ökosystem:

    phpunit.expert/presentations/s

    #FrOSCon #FrOSCon26 #PHP #SoftwareSupplyChainSecurity

    #froscon #froscon26 #php #softwaresupplychainsecurity
  19. Sebastian Bergmann @[email protected] ·

    In meinem Vortrag (Samstag, 10:00 Uhr, Hörsaal 7) geht es um Supply Chain Security im PHP-Ökosystem:

    phpunit.expert/presentations/s

    #FrOSCon #FrOSCon26 #PHP #SoftwareSupplyChainSecurity

    #softwaresupplychainsecurity #php #froscon26 #froscon
  20. Sebastian Bergmann @[email protected] ·

    In meinem Vortrag (Samstag, 10:00 Uhr, Hörsaal 7) geht es um Supply Chain Security im PHP-Ökosystem:

    phpunit.expert/presentations/s

    #FrOSCon #FrOSCon26 #PHP #SoftwareSupplyChainSecurity

    #froscon #froscon26 #php #softwaresupplychainsecurity
  21. Nos @[email protected] ·

    Weitere Themenideen für #Fedicamp-Beiträge wären
    * #Containerisierung und #SoftwareSupplyChainSecurity
    * #Wikipedia/ #Wikidata-Spiele

    #fedicamp #containerisierung #softwaresupplychainsecurity #wikipedia #wikidata
  22. Nos @[email protected] ·

    Weitere Themenideen für #Fedicamp-Beiträge wären
    * #Containerisierung und #SoftwareSupplyChainSecurity
    * #Wikipedia/ #Wikidata-Spiele

    #fedicamp #containerisierung #softwaresupplychainsecurity #wikipedia #wikidata
  23. Nos @[email protected] ·

    Weitere Themenideen für #Fedicamp-Beiträge wären
    * #Containerisierung und #SoftwareSupplyChainSecurity
    * #Wikipedia/ #Wikidata-Spiele

    #fedicamp #containerisierung #softwaresupplychainsecurity #wikipedia #wikidata
  24. Nos @[email protected] ·

    Weitere Themenideen für #Fedicamp-Beiträge wären
    * #Containerisierung und #SoftwareSupplyChainSecurity
    * #Wikipedia/ #Wikidata-Spiele

    #wikidata #wikipedia #softwaresupplychainsecurity #containerisierung #fedicamp
  25. Docker Blog @[email protected] ·

    The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense
    #Engineering #Security #AIAgent #AIML #Docker #ResearchInsights #SBOM #SecureSoftwareSupplyChain #Security #Softwaresupplychainsecurity

    docker.com/blog/software-suppl

    #engineering #security #aiagent #aiml #docker #researchinsights
  26. Docker Blog @[email protected] ·

    The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense
    #Engineering #Security #AIAgent #AIML #Docker #ResearchInsights #SBOM #SecureSoftwareSupplyChain #Security #Softwaresupplychainsecurity

    docker.com/blog/software-suppl

    #engineering #security #aiagent #aiml #docker #researchinsights
  27. Docker Blog @[email protected] ·

    The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense
    #Engineering #Security #AIAgent #AIML #Docker #ResearchInsights #SBOM #SecureSoftwareSupplyChain #Security #Softwaresupplychainsecurity

    docker.com/blog/software-suppl

    #engineering #security #aiagent #aiml #docker #researchinsights
  28. Docker Blog @[email protected] ·

    The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense
    #Engineering #Security #AIAgent #AIML #Docker #ResearchInsights #SBOM #SecureSoftwareSupplyChain #Security #Softwaresupplychainsecurity

    docker.com/blog/software-suppl

    #softwaresupplychainsecurity #securesoftwaresupplychain #sbom #researchinsights #docker #aiml
  29. Docker Blog @docker ·

    The Software Supply Chain Is Under Siege. Devs Are Still the First Line of Defense

    docker.com/blog/software-suppl

    #engineering #security #aiagent #aiml #docker #researchinsights
  30. Docker Blog @[email protected] ·

    Docker OIDC connections for GitHub Actions available for Docker Orgs
    #Docker #Products #DockerHub #Githubactions #Oidcconnections #Security #Softwaresupplychainsecurity

    docker.com/blog/docker-oidc-co

    #docker #products #dockerhub #githubactions #oidcconnections #security
  31. Docker Blog @[email protected] ·

    Docker OIDC connections for GitHub Actions available for Docker Orgs
    #Docker #Products #DockerHub #Githubactions #Oidcconnections #Security #Softwaresupplychainsecurity

    docker.com/blog/docker-oidc-co

    #docker #products #dockerhub #githubactions #oidcconnections #security
  32. Docker Blog @[email protected] ·

    Docker OIDC connections for GitHub Actions available for Docker Orgs
    #Docker #Products #DockerHub #Githubactions #Oidcconnections #Security #Softwaresupplychainsecurity

    docker.com/blog/docker-oidc-co

    #docker #products #dockerhub #githubactions #oidcconnections #security
  33. Docker Blog @[email protected] ·

    Docker OIDC connections for GitHub Actions available for Docker Orgs
    #Docker #Products #DockerHub #Githubactions #Oidcconnections #Security #Softwaresupplychainsecurity

    docker.com/blog/docker-oidc-co

    #softwaresupplychainsecurity #security #oidcconnections #githubactions #dockerhub #products
  34. Docker Blog @docker ·

    Docker OIDC connections for GitHub Actions available for Docker Orgs

    docker.com/blog/docker-oidc-co

    #docker #products #dockerhub #githubactions #oidcconnections #security
  35. Japan @[email protected] ·

    Sios Technology signs Chainguard partnership for Japan OSS security

    KEY POINTSSios Technology signs partnership with U.S.-based Chainguard from July 24, 2026Collaboration combines Sios OSS, API and cloud…
    #EuropeSays #Japan #JP #Chainguard #ChainguardContainers #ChainguardLibraries #DevSecOps #OSS #SiosTechnology #softwaresupplychainsecurity
    europesays.com/japan/63475/

    #softwaresupplychainsecurity #siostechnology #oss #devsecops #chainguardlibraries #chainguardcontainers
  36. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #JScrambler shares a transparent postmortem on how attackers used a stolen #npm publishing token to ship #malware via its official npm package. A must-read for anyone serious about software supply chain security:

    #SoftwareSupplyChainSecurity
    👇
    jscrambler.com/blog/security-i

    #jscrambler #npm #malware #softwaresupplychainsecurity
  37. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #JScrambler shares a transparent postmortem on how attackers used a stolen #npm publishing token to ship #malware via its official npm package. A must-read for anyone serious about software supply chain security:

    #SoftwareSupplyChainSecurity
    👇
    jscrambler.com/blog/security-i

    #jscrambler #npm #malware #softwaresupplychainsecurity
  38. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #JScrambler shares a transparent postmortem on how attackers used a stolen #npm publishing token to ship #malware via its official npm package. A must-read for anyone serious about software supply chain security:

    #SoftwareSupplyChainSecurity
    👇
    jscrambler.com/blog/security-i

    #jscrambler #npm #malware #softwaresupplychainsecurity
  39. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #JScrambler shares a transparent postmortem on how attackers used a stolen #npm publishing token to ship #malware via its official npm package. A must-read for anyone serious about software supply chain security:

    #SoftwareSupplyChainSecurity
    👇
    jscrambler.com/blog/security-i

    #softwaresupplychainsecurity #malware #npm #jscrambler
  40. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #JScrambler shares a transparent postmortem on how attackers used a stolen #npm publishing token to ship #malware via its official npm package. A must-read for anyone serious about software supply chain security:

    #SoftwareSupplyChainSecurity
    👇
    jscrambler.com/blog/security-i

    #jscrambler #npm #malware #softwaresupplychainsecurity
  41. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #AsyncAPI packages were compromised with Miasama RAT #Malware on #NPM:

    * @asyncapi/[email protected]
    * @asyncapi/[email protected]
    * @asyncapi/[email protected]

    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/compromis

    #asyncapi #malware #npm #softwaresupplychainsecurity
  42. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #AsyncAPI packages were compromised with Miasama RAT #Malware on #NPM:

    * @asyncapi/[email protected]
    * @asyncapi/[email protected]
    * @asyncapi/[email protected]

    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/compromis

    #asyncapi #malware #npm #softwaresupplychainsecurity
  43. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #AsyncAPI packages were compromised with Miasama RAT #Malware on #NPM:

    * @asyncapi/[email protected]
    * @asyncapi/[email protected]
    * @asyncapi/[email protected]

    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/compromis

    #asyncapi #malware #npm #softwaresupplychainsecurity
  44. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #AsyncAPI packages were compromised with Miasama RAT #Malware on #NPM:

    * @asyncapi/[email protected]
    * @asyncapi/[email protected]
    * @asyncapi/[email protected]

    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/compromis

    #softwaresupplychainsecurity #npm #malware #asyncapi
  45. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #AsyncAPI packages were compromised with Miasama RAT #Malware on #NPM:

    * @asyncapi/[email protected]
    * @asyncapi/[email protected]
    * @asyncapi/[email protected]

    #SoftwareSupplyChainSecurity
    👇
    stepsecurity.io/blog/compromis

    #asyncapi #malware #npm #softwaresupplychainsecurity
  46. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: A compromised release of the popular #JScrambler npm package introduced hidden #malware binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs:
    #SoftwareSupplyChainSecurity
    👇
    socket.dev/blog/jscrambler-sup

    #npm #jscrambler #malware #softwaresupplychainsecurity
  47. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: A compromised release of the popular #JScrambler npm package introduced hidden #malware binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs:
    #SoftwareSupplyChainSecurity
    👇
    socket.dev/blog/jscrambler-sup

    #npm #jscrambler #malware #softwaresupplychainsecurity
  48. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: A compromised release of the popular #JScrambler npm package introduced hidden #malware binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs:
    #SoftwareSupplyChainSecurity
    👇
    socket.dev/blog/jscrambler-sup

    #npm #jscrambler #malware #softwaresupplychainsecurity
  49. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: A compromised release of the popular #JScrambler npm package introduced hidden #malware binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs:
    #SoftwareSupplyChainSecurity
    👇
    socket.dev/blog/jscrambler-sup

    #softwaresupplychainsecurity #malware #jscrambler #npm
  50. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: A compromised release of the popular #JScrambler npm package introduced hidden #malware binaries that execute automatically during npm install, exposing users to a supply chain attack before any application code runs:
    #SoftwareSupplyChainSecurity
    👇
    socket.dev/blog/jscrambler-sup

    #npm #jscrambler #malware #softwaresupplychainsecurity
  51. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: two hijacked npm packages:
    * html-to-gutenberg
    * fetch-page-assets
    and a cluster of Go packages use VS Code Tasks to deploy #Python Infostealer #malware:
    #SoftwareSupplyChainSecurity
    👇
    thehackernews.com/2026/06/hija

    #npm #python #malware #softwaresupplychainsecurity
  52. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: two hijacked npm packages:
    * html-to-gutenberg
    * fetch-page-assets
    and a cluster of Go packages use VS Code Tasks to deploy #Python Infostealer #malware:
    #SoftwareSupplyChainSecurity
    👇
    thehackernews.com/2026/06/hija

    #npm #python #malware #softwaresupplychainsecurity
  53. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: two hijacked npm packages:
    * html-to-gutenberg
    * fetch-page-assets
    and a cluster of Go packages use VS Code Tasks to deploy #Python Infostealer #malware:
    #SoftwareSupplyChainSecurity
    👇
    thehackernews.com/2026/06/hija

    #npm #python #malware #softwaresupplychainsecurity
  54. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: two hijacked npm packages:
    * html-to-gutenberg
    * fetch-page-assets
    and a cluster of Go packages use VS Code Tasks to deploy #Python Infostealer #malware:
    #SoftwareSupplyChainSecurity
    👇
    thehackernews.com/2026/06/hija

    #softwaresupplychainsecurity #malware #python #npm
  55. Sam Stepanyan :verified: 🐘 @[email protected] ·

    #NPM: two hijacked npm packages:
    * html-to-gutenberg
    * fetch-page-assets
    and a cluster of Go packages use VS Code Tasks to deploy #Python Infostealer #malware:
    #SoftwareSupplyChainSecurity
    👇
    thehackernews.com/2026/06/hija

    #npm #python #malware #softwaresupplychainsecurity
  56. Docker Blog @[email protected] ·

    EU Cyber Resilience Act: Overview, Requirements, and Timelines
    #Docker #Products #Concepts #DockerHardenedImages #DockerScout #Security #Softwaresupplychainsecurity

    docker.com/blog/eu-cyber-resil

    #docker #products #concepts #dockerhardenedimages #dockerscout #security
  57. Docker Blog @[email protected] ·

    EU Cyber Resilience Act: Overview, Requirements, and Timelines
    #Docker #Products #Concepts #DockerHardenedImages #DockerScout #Security #Softwaresupplychainsecurity

    docker.com/blog/eu-cyber-resil

    #docker #products #concepts #dockerhardenedimages #dockerscout #security
  58. Docker Blog @[email protected] ·

    EU Cyber Resilience Act: Overview, Requirements, and Timelines
    #Docker #Products #Concepts #DockerHardenedImages #DockerScout #Security #Softwaresupplychainsecurity

    docker.com/blog/eu-cyber-resil

    #docker #products #concepts #dockerhardenedimages #dockerscout #security
  59. Docker Blog @[email protected] ·

    EU Cyber Resilience Act: Overview, Requirements, and Timelines
    #Docker #Products #Concepts #DockerHardenedImages #DockerScout #Security #Softwaresupplychainsecurity

    docker.com/blog/eu-cyber-resil

    #softwaresupplychainsecurity #security #dockerscout #dockerhardenedimages #concepts #products
  60. Docker Blog @docker ·

    EU Cyber Resilience Act: Overview, Requirements, and Timelines

    docker.com/blog/eu-cyber-resil

    #docker #products #concepts #dockerhardenedimages #dockerscout #security