We’ve all heard that a physical chain is only as strong as its weakest link. A similar truth applies in software development: A software supply chain is only as secure as its weakest link. While it’s ...

Software supply chain cyberattacks are more firmly in the spotlight thanks to several recent high-profile attacks with global impact. According to an Identity Theft Resource Center report, "more than ...

The complexity of today's software development — a mix of open source and third-party components, as well as internally developed code — has resulted in an abundance of vulnerabilities for attackers ...

While recent efforts promise a more secure future for software, experts say several challenges could still vex organizations as they try to improve software security. In late March, Microsoft ...