AppSec engineer Sean Wright warned at the All Day DevOps conference that controls need to be put in place to counter a 742% rise in next-generation supply chain attacks, which have grown rapidly since the SolarWinds incident. To protect againstattacks, companies should ensure servers are well-protected and restrict outbound access. Wright also advised security teams to pay attention to the vector of vulnerability over the severity score.
The NCSC wants developers to get serious on software security
The NCSC’s new Software Security Code of Practice has been praised by cyber professionals as a significant advancement in enhancing software supply chain security.
