Hacking the software supply chain one developer at a time - Paul McCarty

Description
Software engineers are under increased attack in 2023. Cybercriminals and APTs have realized that developers are a juicy target. They often have elevated access to systems and source code, and CI/CD processes. This increased access, and low security maturity means that devs can be vectors for different types of attacks:

- Supply chain: Software engineers create the software systems that customers use, making them a target for criminals seeking to gain access to those customers.
- Access: Criminals will …

access apts attack code cybercriminals developer developers elevated access engineers hacking low maturity paul processes security security maturity software software engineers software supply chain source code supply supply chain systems target under