open source supply chain risk

A single line of borrowed code can now sink dozens of firms at once. That is the danger behind fresh guidance from Britain’s national cyber authority. The National Cyber Security Centre has told software teams to audit their dependencies. The reason is blunt. Attackers have learned to poison the open source packages that modern software … Read more