Post

Ryan
@snarfed.org

The Great Supply Chain Security Paradox: "every open source lib is getting owned! wait at least a week to patch, let other people find the supply chain breaches before you" "AI is reversing all these patches, the window to exploit is down to just hours now, patch your shit immediately!" ... 🧐

3 reposts9 likes

Ryan
@snarfed.org

(credit to @jameswilson.io and Brad Arkin. threat intel feeds may be the answer, eg Sentinel One, Checkmarx, Socket, etc. somehow we came full circle back around to antivirus?!)

James Wilson@jameswilson.io

Supply chain compromise. You know it's going to happen to you. It's inevitable. So, here's how to survive it with advice from ex-Adobe/Cisco/Salesforce CISO, Brad Arkin: 🎧 risky.biz/RBFEATURES23/

risky.bizHow to survive supply chain attacks - Risky Business MediaIn this podcast James Wilson chats with Brad Arkin about why software supply chain attacks have gone from rare, once-in-a-while disasters [Read More]