Why software transparency is critical: Understanding supply chain security in a software-driven society

By now the topic of software supply chain security is clearly among the most discussed topics in the IT/Cybersecurity industry. We know from reports from groups such as Sonatype that software supply chain attacks are up 742% over the last 3 years, and we have seen incidents hit everything from proprietary software vendors to open-source software (OSS) projects and components, impacting thousands of customers and millions of users around the world.

This is why along with my co-author Tony …

attacks critical customers cybersecurity cybersecurity industry incidents industry open-source software oss projects reports security society software software supply chain software supply chain attacks software supply chain security software vendors sonatype supply supply chain supply chain attacks supply chain security topics transparency understanding vendors