New guidance on software supply chain attacks released

John Leonard
clock • 4 min read
NSA, CISA, OpenSSF release guides on preventing supply chain attacks
Image:

NSA, CISA, OpenSSF release guides on preventing supply chain attacks

Linux Foundation's OpenSFF releases npm security guide while US agencies NSA and CISA advise on hardening the component supply chain

The Linux Foundation's Open Source Security Foundation (OpenSSF) has released a best practices guide for developers using dependences from the package manager npm, and in the same week US security ...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

You may also like
CISA issues emergency order on Microsoft breach by Russian hackers

Threats and Risks

Affected bodies must take immediate action, agency says

clock 12 April 2024 • 2 min read
Ivanti patches bugs in Connect Secure and Policy Secure gateways

Threats and Risks

Comes on the heels of federal-level security concerns

clock 05 April 2024 • 3 min read
Cyber agency took systems offline after hack, report

Hacking

CISA cautioned last month about threat actors exploiting multiple Ivanti vulnerabilities

clock 11 March 2024 • 3 min read

More on Threats and Risks

Leicester streetlights on day and night following cyber-attack

Leicester streetlights on day and night following cyber-attack

Effects of ‘highly sophisticated’ breach still being felt

Penny Horwood
clock 25 April 2024 • 1 min read
Mandiant's 2024 threat report - five takeaways

Mandiant's 2024 threat report - five takeaways

Latest M-Trends report details how ransomware, zero-day attacks and other threats evolved last year.

Kyle Alspach
clock 24 April 2024 • 5 min read
Proportion paying ransoms declines in Q1 2024, even as takings break a new record

Proportion paying ransoms declines in Q1 2024, even as takings break a new record

Only 28% willing to meet ransomware gangs' demands

Muskan Arora
clock 23 April 2024 • 2 min read