OWASP researcher: Supply chain attacks show organizations must shift beyond vulnerabilities

It's not news that software supply chain attacks have become a pervasive threat. They have increased greatly — while becoming more complicated, varied, and targeted.

Jeremy Long, a principal engineer at ServiceNow and founder and project lead of the OWASP Dependency Check Program, said that from an attacker’s perspective, targeting the software development supply chain "just makes sense” given the “incomprehensibly large” attack surface and evolving complexity. 

Long spoke at this year’s Black Hat conference in Las Vegas. In …

attacks beyond check dependency engineer founder jeremy organizations owasp perspective program project researcher servicenow software software supply chain software supply chain attacks supply supply chain supply chain attacks threat vulnerabilities