US pins SolarWinds attack on Cozy Bear, boots 10 Russian diplomats

Second Google Chromium zero-day released on Twitter this week

Google rolls out Chrome 90 with HTTPS by default

Thanks to our episode sponsor, Sonatype

With security concerns around software supply chains ushered to center stage in recent months, organizations around the world are turning to Sonatype as trusted advisors. The company's Nexus platform offers the only full-spectrum control of the cloud-native software development lifecycle including third-party open source code, first-party source code, infrastructure as code, and containerized code.