🔗 Software Supply Chain - bobmcn · Scour

CVE Lite CLI closes dependency gap — but won't stop modern threats

🐧Linux Security Blog

reversinglabs.com·

OWASP Dependency-Track 5.0 Is Now Generally Available

🐧Linux Security Blog

owasp.org··Hacker News

Less-relevant results

Is GitHub Actions Putting Your Software at Risk?

🐧Linux Security

spin.atomicobject.com·

Patching fast and slow: Ruby devs delay to defend against supply chain attack

🐧Linux Security News

csoonline.com·

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

💻Programming

news.risky.biz·

GlassFish 8.0.3 Released: Performance optimizations and security fixes

🐧Linux Security

omnifish.ee··r/java

Ruby Fights Supply-Chain Attacks With Filter Offering 'Cooldown' Before Installing New Packages - Slashdot

🐧Linux Security

developers.slashdot.org·

Self-replicating Miasma worm hits 73 Microsoft GitHub repositories in supply chain attack

💻Programming News

thenextweb.com·

Announcing Forrester’s Top Cybersecurity Threats For 2026

🐧Linux Security Blog

forrester.com·

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

💻Programming

thehackernews.com··r/programming

Show HN: CI/lock – supply-chain attestation CLI, from the Witness creators

💻Programming Blog

cilock.dev··Hacker News

Attackers already know the secrets are on your developers’ machines. Do you?

🐧Linux Security

helpnetsecurity.com·

I Researched the Red Hat npm Incident — Here's What Every Developer Should Know

🐧Linux Security Code

github.com··DEV

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised

🐧Linux Security

thenewstack.io·

Making the OWASP top ten in the vibe code era‌‍‍‍‌‍‌‍‌‍‍‌‌‍‌‌‍‍‌‌‍‍‍‍‍‍‍‍‌‌‍‌‌‍‍‌‍‍‌‌‌‌‍‌‍‍‌‍‍‌‌‍‍‍‍‍‍‌‍‍‌‍‌‍‌‌‌‍‌‍‍‍‍‍‍‍‌‍‍‌‌‌‌‌‌‍‍‍‍‌‍‌‍‌‌...

⚖️Work-Life Balance Blog

stackoverflow.blog·

SAST vs SCA: Key Differences for AppSec Teams

🐧Linux Security

orca.security·

Hackers breach Microsoft open source projects to inject credential stealing malware

🐧Linux Security

Ruby's Bundler adds a cooldown feature

💻Programming

·

Eliminating long-lived credentials with trusted publishing

🐧Linux Security

·

Miasma Malware Hits 32 Red Hat Packages via Compromised GitHub Account

🐧Linux Security

Log in to enable infinite scrolling