Dependencies, maintainers, malicious packages, SBOM, VEX, component ownership and open-source responsibility.
Software supply chain & open source
In this episode, we dive into the strange world of invisible Unicode attacks and what they could mean for modern software security.
Listen to the episode
Software supply chain & open source
Matt, Izar, and Chris delve into the complexities of open source security.
Listen to the episode
Software supply chain & open source
Matt, Izar, and Chris have a lively discussion about how security experts perceive open-source software.
Listen to the episode
Software supply chain & open source
Chris, Izar, and Matt address the complexities of open-source component usage, vulnerability patches, civic responsibility, and licensing issues in this Security Table roundtable.
Listen to the episode
Software supply chain & open source
Aditi Sharma joins Matt, Izar, and Chris around the Security Table to discuss Software Bill of Materials (SBOMs).
Listen to the episode
Software supply chain & open source
Join Chris, Matt, and Izar for a lively conversation about an article that offers 20 points of "essential details" to look for in a Software Bill of Materials (SBOM).
Listen to the episode
Software supply chain & open source
The gang considers the software bill of materials (SBOM) approach and asks hard questions about what SBOM is for and whether it improves security.
Listen to the episode