US OMB releases guidance on federal agency software security requirements
The guidance aims to improve the security of software federal agencies use, but expects self-attestation for compliance.
Source: csoonline.com
📰 Dan Lorenc News
Page 4 - Dan Lorenc News Today
Fast, Ad-Free News Updates
Stay updated with breaking news from Dan Lorenc. Real-time updates on events, politics, business and more.
Government guide for supply chain security: The good, the bad and the ugly
The US government is adding to the public discourse while we’re all sorting out software supply chain security best practices.
Dan Lorenc Software Supply Chain For Developers Software Development Framework Levels For Software Artifacts Software Supply Chain Software Artifacts
Source: helpnetsecurity.com
Log4j and why it's not safe to relax yet [Q&A]
The Log4j vulnerability first hit the headlines in December last year. Since then weve heard less about it, but it hasnt gone away, like most vulnerabilities it has a long tail.
Dan Lorenc Elnur Shutterstock National Institute Of Standards Technology Secure Software Development Framework Levels For Software Artifacts Cybersecurity Safety Review Board
Source: betanews.com
Protestware on the rise: Why developers are sabotaging their own code – TechCrunch
A wave of software developers have self-sabotaged their code to protest big corporations to Russia's war in Ukraine.
Source: techcrunch.com
Security startup Chainguard hires two from Google to spearhead comms
Security startup Chainguard hires two from Google to spearhead comms. From PR Week
Source: prweek.com
Security startup Chainguard hires two Google execs to spearhead comms
Security startup Chainguard hires two Google execs to spearhead comms. From PR Week
Source: prweek.com
Software developers have a supply chain security problem
Every day, software developers implicitly trust software packages, container images, dependency maintainers, repository operators, and build systems that we don’t know anything about. It’s the opposite of Zero Trust.
Source: infoworld.com
Sigstore explained: How it helps secure the software supply chain
The free sigstore signing service helps developers establish provenance and integrity of open-source software.
Dan Lorenc Source Software Security Mobilization Plan Chain Levels For Software Artifacts Software Development Framework Linux Foundation Cloud Native Computing Foundation
Source: csoonline.com
Chainguard - AlleyWatch
Chainguard is making the software supply chain secure by default. Founded by Dan Lorenc and Kim Lewandowski in 2021, Chainguard is backed by Amplify Partners, Gordon Chaffee, Joe Duffy, Brandon Philips, and Eric Brewer and is headquartered in Kirkland.
Source: alleywatch.com
Chainguard Raises $50M in Series A Funding
FinSMEs is the financial news site dedicated to covering venture capital, private equity, and merger and acquisition deals in real time!
Source: finsmes.com