Four Types of Supply Chain Attacks Development Teams Should Worry About - Seguridad Mania.com - España y América Latina

Log4Shell, SolarWinds, CodeCov, and the npm package repository are all associated with some type of software supply chain risk or incident, but each represents completely different attack vectors. As we depend more on build and release automation and third- party dependencies, we need to better understand how threat actors exploit them to attack the consumers of software. In this session, you’ll learn • The riskiest points of your software development life cycle • The four most common supply chain attacks, with real-world examples • How to create a firewall around the software supply chain to protect your software and your customers