OWASP Update Elevates Software Supply Chain and Misconfiguration Risk

OWASP Update Elevates Software Supply Chain and Misconfiguration Risk

The reputable and widely used Open Web Application Security Project (OWASP) Top 10 list just got its 8th update, and first update since 2021. One major and welcome change is that supply chain security has gone from not being a category at all to being the number three spot on the list. OWASP is shaking things up in other ways too, with one other new risk category and one consolidation.  Introduction to Malware Binary Triage (IMBT) Course Lookin…

OWASP Update Elevates Software Supply Chain and Misconfiguration Risk

The reputable and widely used Open Web Application Security Project (OWASP) Top 10 list just got its 8th update, and first update since 2021. One major and welcome change is that supply chain security has gone from not being a category at all to being the number three spot on the list. OWASP is shaking things up in other ways too, with one other new risk category and one consolidation.  Here’s OWASP’s own pithy illustration of what’s changed in …

Joining Docker: Prioritizing Security in Software Supply Chains

Securing the Software Supply Chain: Docker’s Vision for a Safer Future In the ever-evolving landscape of cybersecurity, the nature of threats has shifted dramatically. No longer are attacks confined to isolated systems; they exploit the intricate web of connections between them. This modern attack surface encompasses every dependency, container, and human interaction that binds them […]

Why I joined Docker: security at the center of the software supply chain

Mark Lechner, Docker’s CISO, shares his vision for a future where Docker not only powers the software supply chain, but actively safeguards it. Cybersecurity has reached a turning point. The most significant threats no longer exploit isolated systems; they move through the connections between them. The modern attack surface includes every dependency, every container, and every human interaction that connects them.  This interconnected reality is…