Open Source Supply Chain Security News Today : Breaking News, Live Updates & Top Stories | Vimarsana

It was suicide  IT pundit Steven J. Vaughan-Nichols says it was not Microsoft’s evil business deals of the 1990s that killed off Unix but the Uni...

Feb 23, 2021 3:10 PM PT In a recent Linux Foundation blog post titled "Preventing Supply Chain Attacks like SolarWinds," the foundation's Director of Open Source Supply Chain Security, David A. Wheeler, adamantly pushed the need for software developers to embrace the LF's security recommendations to prevent even worse assaults on government and corporate data security in the wake of the rampant data breach. Wheeler's post is timely and filled with information to make it harder for hackers to exploit the future systems we all depend on. He includes 11 Linux Foundation recommendations including...

Feb 23, 2021 3:10 PM PT In a recent Linux Foundation blog post titled "Preventing Supply Chain Attacks like SolarWinds," the foundation's Director of Open Source Supply Chain Security, David A. Wheeler, adamantly pushed the need for software developers to embrace the LF's security recommendations to prevent even worse assaults on government and corporate data security in the wake of the rampant data breach. Wheeler's post is timely and filled with information to make it harder for hackers to exploit the future systems we all depend on. He includes 11 Linux Foundation recommendations including...

David A. Wheeler, the Linux Foundation's Director of Open Source Supply Chain Security, explained that in the Orion attack that the malicious code was inserted into Orion by subverting the program's build environment. This is the process in which a program is compiled from source code to the binary executable program deployed by end-users. In this case, the security company CrowdStrike worked out that the Sunspot malware watched the build server for build commands and silently replaced some of Orion's source code files with malware.  By entering the program before it's even properly a progr...