Open source software (OSS) is a prime target for supply chain cyberattacks and protecting it remains a major challenge.

Hidden dependencies and social engineering attacks can contribute to the insecure use of open-source software in 2025.

Chainguard offers tools that aim to dramatically improve the security of the software supply chain and open source software ... its patented “fly-direct” architecture that avoids the ...

and in the same week US security agencies NSA and CISA published their own guidance on mitigating the risk of software supply chain attacks. Modern applications, both closed- and open source, are ...

Application security company Veracode Inc. today announced that it had acquired certain assets from software supply chain ...

To combat the rise in software supply chain attacks, Veracode has acquired Denver-area startup Phylum and its advanced tools ...

Several high profile software supply chain security incidents over the last ... for the software they develop (49% of respondents) or for open source projects they use (45%) of respondents.

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...