I've just written about a Halloween spooky first hand experience with a compromised third party attack.
Your Site Was Hacked, and You Never Knew About It: My Real-Life Encounter with a Supply Chain Attack
edwinkwan.substack.com/p/you…
𝗛𝗼𝘄 𝗦𝗲𝗰𝘂𝗿𝗲 𝗶𝘀 𝗢𝗽𝗲𝗻 𝗦𝗼𝘂𝗿𝗰𝗲 𝗦𝗼𝗳𝘁𝘄𝗮𝗿𝗲?
Open-source software is the building block of modern applications. From web frameworks to encryption tools, these readily available components offer developers a wealth of functionality and accelerate development
However, this convenience comes with a hidden cost and potential security vulnerabilities.
In this episode of AppSec Unlocked, we'll look at the security considerations surrounding open-source libraries
comparing the controls organisations have for code written in-house with the often murky security practices of open-source projects.
Episode Link: appsecunlocked.substack.com/…
CrowdStrike Incident - Lessons Learned In DevSecOps and BCP
open.substack.com/pub/edwink…
Are there a lot more assumed trust in global cybersecurity vendors that security professionals assess them with less rigor compared to other vendors?
Sharing my thoughts on the recent CrowdStrike incident
open.substack.com/pub/edwink…
Everyone in the audience knew that their organisation uses a fair number of open-source components, but they thought that it only makes up a small percentage of their applications ....
