Not Just Code Vulnerabilities: The Overlooked Cause of Software Supply Chain Attacks

Originally published by Astrix. According to Gartner: “Software supply chain attacks have added a new dimension to software security problems because the software delivery pipelines and the tools used to build and deploy software are the new attack vectors.” While the software supply chain has been a huge catalyst for vulnerabilities, and consequently attacks, there is a new type of supply chain attacks that has proliferated in the last couple of years – taking advantage of the third-party to...

attack attacks attack vectors build code code vulnerabilities delivery deploy gartner pipelines problems security software software delivery software security software supply chain software supply chain attacks supply supply chain supply chain attacks tools vulnerabilities