The Open-Source Trap: Unraveling Open-Source Threats in the Software Supply Chain

The risk to the software supply chain is increasingly clear, as breaches like SolarWinds, Equifax, Event-Stream, and recent PyPI incidents such as revive-jacking, the "ctx" package, and typo-squatting attacks, to name a few.

By

Clayton Boozell

December 5, 2024

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)

December 10, 2024

Top SANS Summit Talks of 2024

This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.

Awareness 24 blog 340x340.png

Security Awareness, Cybersecurity Leadership

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS Security Awareness: Managing Human Risk Summit 2024

Cybersecurity Insights, Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Cloud Security, Open-Source Intelligence (OSINT), Cybersecurity Leadership, Security Awareness, Artificial Intelligence (AI)

December 18, 2023

Top 15 SANS Summit Talks of 2023

This year, SANS hosted 16 Summits with 209 talks. Here were the top-rated talks of the year.