As Strong as the Weakest Link
summary
Covers the SolarWinds/Sunburst supply-chain compromise, analysing the attack’s complexity and tradecraft and identifying the concrete security failures that allowed it to succeed. Discusses why development, build, and deployment systems (including dependency management for explicit and transient open-source components) must be treated as production systems and describes practical security measures that were missed.
AI-written summary · about
related talks
12mAs Strong As the Weakest Link: Securing the Software Supply Chain
29mSupply Chain Security: Threats, Defenses And What You Can Do
39mSoftware Supply Chain Security
25mSupply Chain Attacks
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
58mAttacking through the Software Supply Chain
15mSoftware Supply Chain Security for those in a rush
36mBuilding a Trusted and Resilient Software Supply Chain