Enterprise Security Weekly (Video)

The Elephant in the Pipeline: Securing the Wild, Untamed Software Supply Chain - Pete Morgan - ESW #348


Listen Later

We've seen general users targeted with phishing, financial employees targeted for BEC scams, and engineers targeted for access to infrastructure. The truly scary attacks, however, are the indirect ones that are automated. The threats that come in via software updates, or trusted connections with third parties.

The software supply chain is both absolutely essential, and fragile. A single developer pulling a tiny library out of NPM can cause chaos. A popular open source project changing hands could instantly give access to millions of systems. Every day, a new app store or component repository pops up and becomes critical to maintaining infrastructure.

In this interview, we'll chat with Pete Morgan about how these risks can be managed and mitigated.

Segment Resources:

  • https://blog.phylum.io/q3-2023-evolution-of-software-supply-chain-security-report/
  • https://blog.phylum.io/software-supply-chain-security-research-report-q2-2023/
  • https://blog.phylum.io/q1-2023-evolution-of-software-supply-chain-security/

Show Notes: https://securityweekly.com/esw-348

...more
View all episodesView all episodes
Download on the App Store

Enterprise Security Weekly (Video)By Security Weekly Productions

  • 4.7
  • 4.7
  • 4.7
  • 4.7
  • 4.7

4.7

3 ratings


More shows like Enterprise Security Weekly (Video)

View all
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

626 Listeners

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

366 Listeners

Grumpy Old Geeks by Jason DeFillippo & Brian Schulmeister with Dave Bittner

Grumpy Old Geeks

6,020 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,009 Listeners

Security Weekly News (Video) by Security Weekly Productions

Security Weekly News (Video)

5 Listeners

Smashing Security by Graham Cluley & Carole Theriault

Smashing Security

312 Listeners

Up First from NPR by NPR

Up First from NPR

56,221 Listeners

Cybersecurity Today by Jim Love

Cybersecurity Today

166 Listeners

Talkin' About [Infosec] News, Powered by Black Hills Information Security by Black Hills Information Security

Talkin' About [Infosec] News, Powered by Black Hills Information Security

91 Listeners

Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

Defense in Depth

74 Listeners

Cloud Security Podcast by Cloud Security Podcast Team

Cloud Security Podcast

58 Listeners

Cyber Security Headlines by CISO Series

Cyber Security Headlines

127 Listeners